CVE-2020-14310: Buffer Overflow
A flaw was found in grub2. An expected font value is not verified before proceeding with buffer allocations allowing an attacker to use a malicious font file to create an arithmetic overflow, zero-sized allocation, and further heap-based buffer overflow. The highest threat from this vulnerability is to data integrity and system availability.
Other sources
Integer overflow in readsectionasstring triggered by a specially crafted font file containing a NAME section with a length of UINT32MAX, which leads to a zero-sized allocation and subsequent heap buffer overflow with attacker controlled data.
— Red Hat
There is an issue on grub2 before version 2.06 at function readsectionasstring(). It expects a font name to be at max UINT32MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32MAX leading to readsectionasstring() to an arithmetic overflow zero-sized allocation and further heap-based buffer overflow.
— Microsoft
There is an issue on grub2 before version 2.06 at function readsectionasstring(). It expects a font name to be at max UINT32MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32MAX, leading to readsectionasstring() to an arithmetic overflow, zero-sized allocation and further heap-based buffer overflow.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-14310?
CVE-2020-14310 is a vulnerability in grub2 that allows an attacker to craft a malicious font name, leading to buffer overflow.
What is the severity of CVE-2020-14310?
CVE-2020-14310 has a severity rating of 5.7 (medium).
How does CVE-2020-14310 impact affected software?
CVE-2020-14310 impacts affected software by allowing an attacker to exploit a buffer overflow vulnerability in grub2.
How can I fix CVE-2020-14310?
To fix CVE-2020-14310, you should upgrade to version 2.06 of grub2 or apply the appropriate security updates provided by your software vendor.
Where can I find more information about CVE-2020-14310?
You can find more information about CVE-2020-14310 on the Red Hat website, including the official advisory and CVE page.