CVE-2020-14311: Buffer Overflow
A flaw was found in grub2 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32MAX causes an arithmetic overflow, leading to a zero-sized memory allocation with a subsequent heap-based buffer overflow. The highest threat from this vulnerability is to integrity and system availability.
Other sources
Integer overflow in grubext2readlink triggered by a specially crafted ext4 filesystem containing a symlink inode with a size of UINT32MAX, which leads to a zero-sized allocation and subsequent heap buffer overflow with attacker controlled data.
— Red Hat
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-14311?
CVE-2020-14311 is a vulnerability in grub2 that can lead to a heap-based buffer overflow.
How severe is CVE-2020-14311?
CVE-2020-14311 has a severity score of 5.7, which is considered medium.
Which software is affected by CVE-2020-14311?
grub2 versions before 2.06 and fwupdate versions 0:12-6.el7_8 are affected by CVE-2020-14311.
What is the remedy for CVE-2020-14311?
To fix CVE-2020-14311, update grub2 to version 2.06 or fwupdate to version 0:12-6.el7_8.
Where can I find more information about CVE-2020-14311?
You can find more information about CVE-2020-14311 at the following references: [link1](https://access.redhat.com/errata/RHSA-2020:3216), [link2](https://access.redhat.com/security/cve/cve-2020-14311), [link3](https://access.redhat.com/errata/RHSA-2020:3217)