CVE-2020-14309

GRUB2 CVE-2020-14309 affects grub2

CVE-2020-14309

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacke...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists through integer overflow in initrd size handling...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists as it fails kernel validation without shim protocol...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists through integer overflow in grubext2readlink...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free when redefining a function whilst the same function is already executing...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists as an integer overflow in readsectionasstring may lead to heap-based buffer overflow...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists as an integer overflow in grubsquashreadsymlink may lead to heap-based buffer overflow...

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists as the grubmalloc does not validate allocation size allowing for arithmetic overflow and subsequent heap-based buffer overflow...

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution. The vulnerability exists through a crafted grub.cfg file during boot process...

grub2, mokutil, shim security update

CentOS Errata and Security Advisory CESA-2020:3217 An update for grub2, shim, shim-signed, and fwupdate is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

RHEL 8 : grub2 (RHSA-2020:3216)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3216 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0311

An update of 'grub2' packages of Photon OS has been released. This updates fixes CVE-2020-10713 commonly known as BootHole...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2079-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

Ubuntu: Security Advisory (USN-4432-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : grub2 (ELSA-2020-5782)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5782 advisory. - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072...

CentOS: Security Advisory for shim-unsigned-ia32 (CESA-2020:3217)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2077-1)

This update for grub2 fixes the following issues : CVE-2020-10713 bsc1168994 CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 CVE-2020-15706 bsc1174463 CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expression for buffer allocations may...

Important Photon OS Security Update - PHSA-2020-3.0-0120

Updates of 'grub2', 'linux' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0267

An update of 'grub2' packages of Photon OS has been released. This updates fixes CVE-2020-10713 commonly known as BootHole...