Vulnerability · Published Jul 30, 2020 · Assigned by redhat
CVE-2020-14309
Medium 6.7
In plain English
A medium-severity security flaw in Grub. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)0.5%top 58.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacker controlled data.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | grub | 2.06-r0 | ALPINE-CVE-2020-14309 |
| Alpine:v3.21 | grub | 2.06-r0 | ALPINE-CVE-2020-14309 |
| Alpine:v3.22 | grub | 2.06-r0 | ALPINE-CVE-2020-14309 |
| Alpine:v3.23 | grub | 2.06-r0 | ALPINE-CVE-2020-14309 |
| Alpine:v3.24 | grub | 2.06-r0 | ALPINE-CVE-2020-14309 |
| Debian:12 | grub2 | 2.04-9 | DEBIAN-CVE-2020-14309 |
| Debian:13 | grub2 | 2.04-9 | DEBIAN-CVE-2020-14309 |
| Debian:14 | grub2 | 2.04-9 | DEBIAN-CVE-2020-14309 |
Affected products (as reported)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1852022 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20200731-0008/ x_refsource_CONFIRM
- USN-4432-1 vendor-advisory, x_refsource_UBUNTU
- openSUSE-SU-2020:1169 vendor-advisory, x_refsource_SUSE
- openSUSE-SU-2020:1168 vendor-advisory, x_refsource_SUSE
- GLSA-202104-05 vendor-advisory, x_refsource_GENTOO