Debian/grub2: medium 6
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buf
Action: Upgrade grub2 to 2.04-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.04-9 | - |
Fixed versions
| 2.04-9 |
Sources
- osv: DEBIAN-CVE-2020-14310#Debian:13/grub2
- https://security-tracker.debian.org/tracker/CVE-2020-14310
published · modified · JSON