CVE-2020-14308

Katalog CVE

CVSS 6.4 · Medium EPSS 0,43%

Kerentanan Integer Overflow or Wraparound pada gnu grub2, opensuse leap. Skor CVSS 3.1 6.4 (Medium) menurut NVD.

Deskripsi (NVD)

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

Rincian

Terbit di NVD

29 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/07/29/3 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/09/17/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/09/17/4 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/09/21/1 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1852009 issue tracking · advisory pihak ketiga
• https://security.gentoo.org/glsa/202104-05 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200731-0008/ advisory pihak ketiga
• https://usn.ubuntu.com/4432-1/ advisory pihak ketiga