CVE-2023-4692 — Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

Affected: grub, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.

USN-6410-1 — grub2-signed, grub2-unsigned vulnerabilities

Affected: Ubuntu:20.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned

It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. (CVE-2023-4692)

It was discovered that a specially crafted file system image could cause an out-of-bounds read. A physically-present attacker could possibly use this to leak sensitive information to the GRUB pager. (CVE-2023-4693)

Most recent entries from all

CVE-2023-4692 — Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

USN-6410-1 — grub2-signed, grub2-unsigned vulnerabilities