Aller au contenu
Se connecter
Non notée

CVE-2020-14309 There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link…

Description

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacker controlled data.

Produits et versions touchés

Produit Versions touchées Corrigé en
Grub Versions non publiées

Autres CVE de Grub

Les 3 CVE de Grub →
CVE-2020-10713 A flaw was found in grub2, prior to version 2.06 Non notée CVE-2020-14308 In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested… Non notée
Suivre cette CVE