CVE:CVE-2020-14310
CNNVD:CNNVD-202007-1737
grub2是GNU社区的一款Linux系统引导程序。
grub2 2.06之前版本中的‘read_section_as_string()’函数存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade gnu grub2 to a higher version than 2.06,and avoid the version (,2.06); Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,and avoid the version 8.1,8.2; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,and avoid the version 8.2; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,and avoid the version 8.2; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04