Lucene search
UbuntuUSN-6410-1HistoryOct 04, 2023 - 12:00 a.m.
GRUB2 vulnerabilities
2023-10-0400:00:00
ubuntu.com
23
ubuntu
grub2
vulnerabilities
heap-based
out-of-bounds
execution bypass
secure boot
protections
filesystem
image
cve-2023-4692
cve-2023-4693
sensitive information
Releases
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- grub2-signed - GRand Unified Bootloader
- grub2-unsigned - GRand Unified Bootloader
Details
It was discovered that a specially crafted file system image could cause a
heap-based out-of-bounds write. A local attacker could potentially use this
to perform arbitrary code execution bypass and bypass secure boot
protections. (CVE-2023-4692)
It was discovered that a specially crafted file system image could cause an
out-of-bounds read. A physically-present attacker could possibly use this
to leak sensitive information to the GRUB pager. (CVE-2023-4693)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.04 | noarch | grub-efi-amd64 | < 2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-amd64-bin | < 2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-amd64-dbg | < 2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-arm64 | < 2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-arm64-bin | < 2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-arm64-dbg | < 2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-amd64-signed | < 1.193.2+2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 23.04 | noarch | grub-efi-arm64-signed | < 1.193.2+2.06-2ubuntu17.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | grub-efi-amd64 | < 2.06-2ubuntu14.4 | UNKNOWN |
| Ubuntu | 22.04 | noarch | grub-efi-amd64-bin | < 2.06-2ubuntu14.4 | UNKNOWN |
Related
nessus
nessus
EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2023-3333)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2024-1060)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2024-1084)
2024-01-16 00:00:00
osv
osv
grub2-signed, grub2-unsigned vulnerabilities
2023-10-04 01:31:42
grub2 - security update
2023-10-06 00:00:00
grub2 - security update
2023-10-06 00:00:00
redhatcve
redhatcve
CVE-2023-4692
2023-10-03 18:24:36
CVE-2023-4693
2023-10-03 18:24:46
amazon
amazon
Important: grub2
2023-10-12 15:08:00
fedora
fedora
[SECURITY] Fedora 39 Update: grub2-2.06-120.fc39
2024-04-29 01:55:42
[SECURITY] Fedora 38 Update: grub2-2.06-118.fc38
2024-05-03 01:36:58
[SECURITY] Fedora 40 Update: grub2-2.06-121.fc40
2024-04-23 01:15:56
openvas
openvas
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1651)
2024-05-16 00:00:00
Debian: Security Advisory (DLA-3605-1)
2023-10-06 00:00:00
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1035)
2024-01-05 00:00:00
debian
debian
[SECURITY] [DSA 5519-1] grub2 security update
2023-10-06 19:03:15
[SECURITY] [DLA 3605-1] grub2 security update
2023-10-05 21:46:52
redhat
redhat
(RHSA-2024:2456) Moderate: grub2 security update
2024-04-30 06:15:45
(RHSA-2024:3184) Moderate: grub2 security update
2024-05-22 06:35:52
oraclelinux
oraclelinux
grub2 security update
2024-05-03 00:00:00
grub2 security update
2024-05-24 00:00:00
almalinux
almalinux
Moderate: grub2 security update
2024-04-30 00:00:00
cvelist
cvelist
CVE-2023-4693 Grub2: out-of-bounds read at fs/ntfs.c
2023-10-25 10:27:29
cbl_mariner
cbl_mariner
CVE-2023-4693 affecting package grub2 for versions less than 2.06-18
2024-04-19 22:15:55
CVE-2023-4692 affecting package grub2 for versions less than 2.06-13
2024-03-05 17:52:42
CVE-2023-4693 affecting package grub2 for versions less than 2.06-13
2024-03-05 17:52:42
debiancve
debiancve
CVE-2023-4693
2023-10-25 18:17:41
CVE-2023-4692
2023-10-25 18:17:41
ubuntucve
ubuntucve
CVE-2023-4693
2023-10-03 00:00:00
CVE-2023-4692
2023-10-03 00:00:00
prion
prion
Design/Logic Flaw
2023-10-25 18:17:00
Heap overflow
2023-10-25 18:17:00
mageia
mageia
Updated grub2 packages fix security vulnerabilities
2024-03-28 06:52:55
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0130
2023-10-30 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0505
2023-11-04 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0681
2023-11-04 00:00:00
veracode
veracode
Out-of-Bounds Write
2023-10-08 22:49:41
Out-of-bounds Read
2023-10-08 22:49:43
cve
cve
CVE-2023-4693
2023-10-25 18:17:41
CVE-2023-4692
2023-10-25 18:17:41
redos
redos
ROS-20240405-01
2024-04-05 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00