Vulnerabilities > GNU > Grub2 > 2.06

DATE CVE VULNERABILITY TITLE RISK
2020-07-30 CVE-2020-14309 Integer Overflow or Wraparound vulnerability in multiple products
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size.
local
low complexity
gnu opensuse CWE-190
4.6
2020-07-30 CVE-2020-10713 Classic Buffer Overflow vulnerability in multiple products
A flaw was found in grub2, prior to version 2.06.
local
low complexity
gnu debian opensuse vmware CWE-120
8.2
2020-07-29 CVE-2020-14308 Integer Overflow or Wraparound vulnerability in multiple products
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size.
4.4