medium5.7
CVE-2020-14311
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems.
Impact
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Grub2 | before 2.06 |
| Redhat | Enterprise Linux | Versions 7.0, 8.0 |
| Redhat | Enterprise Linux Eus | Versions 8.1, 8.2 |
| Redhat | Enterprise Linux Server Aus | Version 8.2 |
| Redhat | Enterprise Linux Server Tus | Version 8.2 |
| Opensuse | Leap | Versions 15.1, 15.2 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 18.04, 20.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html
- http://www.openwall.com/lists/oss-security/2021/09/17/2
- http://www.openwall.com/lists/oss-security/2021/09/17/4
- http://www.openwall.com/lists/oss-security/2021/09/21/1
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14311
- https://security.gentoo.org/glsa/202104-05
- https://usn.ubuntu.com/4432-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html
- http://www.openwall.com/lists/oss-security/2021/09/17/2
- http://www.openwall.com/lists/oss-security/2021/09/17/4
- http://www.openwall.com/lists/oss-security/2021/09/21/1
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14311
- https://security.gentoo.org/glsa/202104-05
- https://usn.ubuntu.com/4432-1/