PT-2020-3615
CVE-2020-14308
·
تاريخ النشر
2020-07-29
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
6.4
متوسطةالمقاييسAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Grub2 versions prior to 2.06
Description
The issue is related to an integer overflow in the implementation of the dynamic memory allocation function in the Grub2 operating system loader. This can lead to the function returning invalid memory allocations, potentially affecting the integrity, confidentiality, and availability of information during the boot process.
Recommendations
For Grub2 versions prior to 2.06, update to version 2.06 or later to resolve the issue. As a temporary workaround, consider restricting the use of dynamic memory allocation in the Grub2 loader until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾