CVE-2020-14308: Integer Overflow

Published Jun 29, 2020
·
Updated

A flaw was found in current grub2 versions as shipped with Red Hat Enterprise Linux 7 and 8, where the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This issue leads the function to return invalid memory allocations, causing heap-based overflows in several code paths. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.

Other sources

Currently grubmalloc() function and related memory infrastructure underlying it doesn't fully validate the allocation size. This can lead to arithmetic overflows leading to invalid memory allocations, which can be leverage to heap-based overflows in several code paths.

Red Hat

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

Affected Software

33 affected componentsFixes available
redhat/fwupdate<0:12-6.el7_8
0:12-6.el7_8
redhat/grub2<1:2.02-0.86.el7_8
1:2.02-0.86.el7_8
redhat/shim<0:15-7.el7_9
0:15-7.el7_9
redhat/shim-signed<0:15-7.el7_8
0:15-7.el7_8
redhat/grub2<1:2.02-0.86.el7_2
1:2.02-0.86.el7_2
redhat/shim<0:15-8.el7
0:15-8.el7
redhat/shim-signed<0:15-8.el7_2
0:15-8.el7_2
redhat/grub2<1:2.02-0.86.el7
1:2.02-0.86.el7
redhat/shim-signed<0:15-8.el7_3
0:15-8.el7_3
redhat/fwupdate<0:9-10.el7_4
0:9-10.el7_4
redhat/grub2<1:2.02-0.86.el7_4
1:2.02-0.86.el7_4
redhat/shim-signed<0:15-8.el7_4
0:15-8.el7_4
redhat/fwupdate<0:12-6.el7_6
0:12-6.el7_6
redhat/grub2<1:2.02-0.86.el7_6
1:2.02-0.86.el7_6
redhat/shim-signed<0:15-8.el7_6
0:15-8.el7_6
redhat/fwupdate<0:12-6.el7_7
0:12-6.el7_7
redhat/grub2<1:2.02-0.86.el7_7
1:2.02-0.86.el7_7
redhat/shim-signed<0:15-8.el7_7
0:15-8.el7_7
redhat/fwupd<0:1.1.4-7.el8_2
0:1.1.4-7.el8_2
redhat/grub2<1:2.02-87.el8_2
1:2.02-87.el8_2
redhat/shim<0:15-14.el8_2
0:15-14.el8_2
redhat/shim-unsigned-x64<0:15-7.el8
0:15-7.el8
redhat/fwupd<0:1.1.4-2.el8_0
0:1.1.4-2.el8_0
redhat/grub2<1:2.02-87.el8_0
1:2.02-87.el8_0
redhat/shim<0:15-14.el8_0
0:15-14.el8_0
redhat/fwupd<0:1.1.4-2.el8_1
0:1.1.4-2.el8_1
redhat/grub2<1:2.02-87.el8_1
1:2.02-87.el8_1
redhat/shim<0:15-14.el8_1
0:15-14.el8_1
redhat/grub<2.06
2.06
GNU GRUB2<2.06
openSUSE Leap=15.1
openSUSE Leap=15.2
debian/grub2
2.06-3~deb11u62.06-13+deb12u12.12-92.14~git20250718.0e36779-22.14-2

Event History

Jul 29, 2020
CVE Published
05:00 PM
CVE Published
via MITRE·07:03 PM
Data Sourced
via MITRE·07:03 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:40 PM
Description
Feb 26, 2026
Data Sourced
via Ubuntu·06:24 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·06:24 PM
DescriptionAffected Software

Frequently Asked Questions

1

What is CVE-2020-14308?

CVE-2020-14308 is a vulnerability in grub2, the GRand Unified Bootloader, which allows for heap-based overflow due to a flaw in the memory allocator.

2

How does CVE-2020-14308 affect Red Hat Enterprise Linux?

CVE-2020-14308 affects Red Hat Enterprise Linux 7 and 8, as it is present in the shipped versions of grub2.

3

What is the severity of CVE-2020-14308?

CVE-2020-14308 has a severity level of medium with a CVSS score of 6.4.

4

How can I fix CVE-2020-14308?

To fix CVE-2020-14308, you need to update grub2 to version 2.06 or higher.

5

Where can I find more information about CVE-2020-14308?

You can find more information about CVE-2020-14308 on the Red Hat Security Advisory and CVE websites.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203