Medium severity6.4NVD Advisory· Published Jul 29, 2020· Updated Jun 17, 2026
CVE-2020-14308
CVE-2020-14308
Description
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31- grub2/grub2description
- osv-coords29 versionspkg:rpm/opensuse/grub2&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/grub2&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/grub2&distro=openSUSE%20Tumbleweedpkg:rpm/suse/grub2&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/grub2&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/grub2&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/grub2&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/grub2&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/grub2&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/grub2&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 2.02-lp151.21.21.4+ 28 more
- (no CPE)range: < 2.02-lp151.21.21.4
- (no CPE)range: < 2.04-lp152.7.3.4
- (no CPE)range: < 2.06-7.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-19.48.1
- (no CPE)range: < 2.02-19.48.1
- (no CPE)range: < 2.02-26.25.1
- (no CPE)range: < 2.04-9.7.1
- (no CPE)range: < 2.02-26.25.1
- (no CPE)range: < 2.04-9.7.1
- (no CPE)range: < 2.00-0.66.15.1
- (no CPE)range: < 2.02~beta2-115.49.1
- (no CPE)range: < 2.02~beta2-115.49.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-12.31.1
- (no CPE)range: < 2.02-12.31.1
- (no CPE)range: < 2.02-19.48.1
- (no CPE)range: < 2.02~beta2-115.49.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-12.31.1
- (no CPE)range: < 2.02-12.31.1
- (no CPE)range: < 2.02-19.48.1
- (no CPE)range: < 2.02~beta2-115.49.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-12.31.1
- (no CPE)range: < 2.02-4.53.1
- (no CPE)range: < 2.02-12.31.1
Patches
Vulnerability mechanics
References
10- lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.htmlnvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2020/07/29/3nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2021/09/17/2nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2021/09/17/4nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2021/09/21/1nvdMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- security.gentoo.org/glsa/202104-05nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20200731-0008/nvdThird Party Advisory
- usn.ubuntu.com/4432-1/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.