Moderate: grub2 security update

2024-01-2500:00:00

errata.almalinux.org

grub2

security update

bypassed password protection

cve-2023-4001

cvss score

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.8%

JSON

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

grub2: bypass the GRUB password protection feature (CVE-2023-4001)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchgrub2-efi-aa64-modules< 2.06-70.el9_3.2.alma.1grub2-efi-aa64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux9noarchgrub2-efi-x64-modules< 2.06-70.el9_3.2.alma.1grub2-efi-x64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux9noarchgrub2-common< 2.06-70.el9_3.2.alma.1grub2-common-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux9noarchgrub2-ppc64le-modules< 2.06-70.el9_3.2.alma.1grub2-ppc64le-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux9noarchgrub2-pc-modules< 2.06-70.el9_3.2.alma.1grub2-pc-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux9ppc64legrub2-tools-minimal< 2.06-70.el9_3.2.alma.1grub2-tools-minimal-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux9ppc64legrub2-tools< 2.06-70.el9_3.2.alma.1grub2-tools-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux9ppc64legrub2-ppc64le< 2.06-70.el9_3.2.alma.1grub2-ppc64le-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux9ppc64legrub2-tools-extra< 2.06-70.el9_3.2.alma.1grub2-tools-extra-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux9aarch64grub2-tools< 2.06-70.el9_3.2.alma.1grub2-tools-2.06-70.el9_3.2.alma.1.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	grub2-efi-aa64-modules	< 2.06-70.el9_3.2.alma.1	grub2-efi-aa64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux	9	noarch	grub2-efi-x64-modules	< 2.06-70.el9_3.2.alma.1	grub2-efi-x64-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux	9	noarch	grub2-common	< 2.06-70.el9_3.2.alma.1	grub2-common-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux	9	noarch	grub2-ppc64le-modules	< 2.06-70.el9_3.2.alma.1	grub2-ppc64le-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux	9	noarch	grub2-pc-modules	< 2.06-70.el9_3.2.alma.1	grub2-pc-modules-2.06-70.el9_3.2.alma.1.noarch.rpm
almalinux	9	ppc64le	grub2-tools-minimal	< 2.06-70.el9_3.2.alma.1	grub2-tools-minimal-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux	9	ppc64le	grub2-tools	< 2.06-70.el9_3.2.alma.1	grub2-tools-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux	9	ppc64le	grub2-ppc64le	< 2.06-70.el9_3.2.alma.1	grub2-ppc64le-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux	9	ppc64le	grub2-tools-extra	< 2.06-70.el9_3.2.alma.1	grub2-tools-extra-2.06-70.el9_3.2.alma.1.ppc64le.rpm
almalinux	9	aarch64	grub2-tools	< 2.06-70.el9_3.2.alma.1	grub2-tools-2.06-70.el9_3.2.alma.1.aarch64.rpm