CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-14311

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.1%

CVSS Severity

CVSS v3 Score 5.7

CVSS v2 Score 3.6

References

Products affected by CVE-2020-14311

Gnu » Grub2 » Version: N/A

cpe:2.3:a:gnu:grub2:-
Gnu » Grub2 » Version: 1.98

cpe:2.3:a:gnu:grub2:1.98
Gnu » Grub2 » Version: 1.99

cpe:2.3:a:gnu:grub2:1.99
Gnu » Grub2 » Version: 2.00

cpe:2.3:a:gnu:grub2:2.00
Gnu » Grub2 » Version: 2.01

cpe:2.3:a:gnu:grub2:2.01
Gnu » Grub2 » Version: 2.02

cpe:2.3:a:gnu:grub2:2.02
Gnu » Grub2 » Version: 2.04

cpe:2.3:a:gnu:grub2:2.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 20.04

cpe:2.3:o:canonical:ubuntu_linux:20.04
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Opensuse » Leap » Version: 15.2

cpe:2.3:o:opensuse:leap:15.2
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-14311

Products

Pricing

Contact Us