Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-14311

Description

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.

POC

Reference

No PoCs from references.

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/DNTYO/F5_Vulnerability

- https://github.com/EuroLinux/shim-review

- https://github.com/Fortinetofficial/shim-review

- https://github.com/Jurij-Ivastsuk/WAXAR-shim-review

- https://github.com/NaverCloudPlatform/shim-review

- https://github.com/Rodrigo-NR/shim-review

- https://github.com/amzdev0401/shim-review-backup

- https://github.com/baramundisoftware/ShimReview_2024

- https://github.com/bitraser/shim-review-15.4

- https://github.com/coreyvelan/shim-review

- https://github.com/ctrliq/ciq-shim-build

- https://github.com/ctrliq/shim-review

- https://github.com/jason-chang-atrust/shim-review

- https://github.com/jsegitz/shim-review-nonfork

- https://github.com/lenovo-lux/shim-review

- https://github.com/luojc123/shim-nsdl

- https://github.com/mwti/rescueshim

- https://github.com/n0-traces/cve_monitor

- https://github.com/neppe/shim-review

- https://github.com/neverware/shim-review

- https://github.com/ozun215/shim-review

- https://github.com/puzzleos/uefi-shim_review

- https://github.com/rhboot/shim-review

- https://github.com/synackcyber/BootHole_Fix

- https://github.com/vathpela/shim-review

- https://github.com/zeetim/shim-review