PT-2020-3615
CVE-2020-14308
·
Published
2020-07-29
·
Updated
2026-10-31
Description by
CVSS 3.1
6.4
MediumMetricsAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Grub2 versions prior to 2.06
Description
The issue is related to an integer overflow in the implementation of the dynamic memory allocation function in the Grub2 operating system loader. This can lead to the function returning invalid memory allocations, potentially affecting the integrity, confidentiality, and availability of information during the boot process.
Recommendations
For Grub2 versions prior to 2.06, update to version 2.06 or later to resolve the issue. As a temporary workaround, consider restricting the use of dynamic memory allocation in the Grub2 loader until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾