VDB
CVE-2020-14310
CVE-2020-14310
PUBLISHED
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32_MAX, leading to read_section_as_string() to an arithmetic overflow, zero-sized allocation and further heap-based buffer overflow.
EPSS 0.06% · 18.9th percentile
Risk Scores
EPSS Score
0.06%
18.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | grub2-unsigned | 2.04-1ubuntu44.1, 2.04-1ubuntu44, 0 |
| Ubuntu:16.04:LTS | grub2-signed | 1.66.1, 1.66, 1.66.12 |
| Ubuntu:Pro:14.04:LTS | grub2-signed | 1.34.6, 1.34.4, 1.34.3 |
| Ubuntu:18.04:LTS | grub2 | 2.02-2ubuntu1, 0, 2.02-2ubuntu8.1 |
| Ubuntu:20.04:LTS | grub2-unsigned | 2.04-1ubuntu44, 2.04-1ubuntu44.2, 0 |
| Ubuntu:20.04:LTS | grub2 | 2.04-1ubuntu12, 0, 2.04-1ubuntu13 |
| Ubuntu:16.04:LTS | grub2 | *, *, 2.02~beta2-36ubuntu3.23 |
| Ubuntu:Pro:14.04:LTS | grub2 | 2.00-21, 0, 2.00-19ubuntu2 |
| Ubuntu:18.04:LTS | grub2-signed | 1.93.2, 1.93.10, 1.85 |
| Ubuntu:20.04:LTS | grub2-signed | 1.137, 0, 1.128 |
| Ubuntu:16.04:LTS | grub2-unsigned | 2.04-1ubuntu44.1.2, 0, 2.04-1ubuntu44 |
Timeline
- Jul 29, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 22, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 25, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 27, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 2, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-14310 third-party-advisory
- https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ third-party-advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass third-party-advisory
- https://www.openwall.com/lists/oss-security/2020/07/29/3 third-party-advisory
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html third-party-advisory
- https://ubuntu.com/security/notices/USN-4432-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-14310 third-party-advisory