CVE-2020-14308

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size

published July 29, 2020

CVSS
—
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Published
2020-07-29T19:03Z
EPSS history
Timeline
  • 29 JUL 19:03Z
    In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size
    cvelistv5