Security Advisory

CVE-2020-14311

5.7
MEDIUM

Vulnerability Description

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
Published Date July 31, 2020
Official Source NIST NVD Advisory