CVE:CVE-2020-27749
CNNVD:CNNVD-202103-232
grub2是GNU社区的一款Linux系统引导程序。
grub2 存在缓冲区错误漏洞，该漏洞在grub_parser_split_cmdline中发现了堆栈缓冲区溢出漏洞。以下产品和版本受到影响：grub2 in versions prior to 2.06。
solution:Upgrade gnu grub2 to a higher version than 2.06,and avoid the version (,2.06); Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.6,7.7,8.2,and avoid the version 7.2,7.3,7.4,7.6,7.7,8.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,7.7,8.1,and avoid the version 7.6,7.7,8.1; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,7.7,8.2,and avoid the version 7.4,7.6,7.7,8.2; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -