Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-14308

Опубликовано: 29 июл. 2020
Источник: ubuntu
Приоритет: high
EPSS Низкий
CVSS2: 4.4
CVSS3: 6.4

Описание

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

РелизСтатусПримечание
bionic

released

2.02-2ubuntu8.16
devel

not-affected

2.06-2ubuntu18
esm-infra-legacy/trusty

not-affected

2.02~beta2-9ubuntu1.20
esm-infra/bionic

not-affected

2.02-2ubuntu8.16
esm-infra/focal

not-affected

2.04-1ubuntu26.1
esm-infra/xenial

not-affected

2.02~beta2-36ubuntu3.26
focal

released

2.04-1ubuntu26.1
groovy

not-affected

2.04-1ubuntu26.1
hirsute

not-affected

2.04-1ubuntu26.1
jammy

not-affected

2.06-2ubuntu7

Показывать по

РелизСтатусПримечание
bionic

released

1.93.18
devel

not-affected

1.193
eoan

ignored

end of life
esm-infra-legacy/trusty

not-affected

1.34.22
esm-infra/bionic

not-affected

1.93.18
esm-infra/focal

not-affected

1.142.3
esm-infra/xenial

not-affected

1.66.26
focal

released

1.142.3
groovy

not-affected

1.147
hirsute

not-affected

1.147

Показывать по

РелизСтатусПримечание
bionic

released

2.04-1ubuntu47.4
devel

not-affected

2.06-2ubuntu17
esm-infra-legacy/trusty

DNE

esm-infra/bionic

needs-triage

esm-infra/focal

not-affected

2.04-1ubuntu47.4
esm-infra/xenial

needed

focal

released

2.04-1ubuntu47.4
jammy

not-affected

2.06-2ubuntu7
kinetic

not-affected

2.06-2ubuntu12
lunar

not-affected

2.06-2ubuntu16

Показывать по

EPSS

Процентиль: 7%
0.00031
Низкий

4.4 Medium

CVSS2

6.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.4
redhat
около 5 лет назад

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

CVSS3: 6.4
nvd
около 5 лет назад

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

CVSS3: 6.4
msrc
почти 5 лет назад

Описание отсутствует

CVSS3: 6.4
debian
около 5 лет назад

In grub2 versions before 2.06 the grub memory allocator doesn't check ...

CVSS3: 6.4
github
около 3 лет назад

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

EPSS

Процентиль: 7%
0.00031
Низкий

4.4 Medium

CVSS2

6.4 Medium

CVSS3