Vulnerability-Lookup

RHSA-2024:3184

Vulnerability from csaf_opensuse - Published: 2024-05-22 00:00 - Updated: 2026-09-20 11:39

Summary

security update for grub2

Severity

Low

Notes

Title of the patch: security update for grub2

Description of the patch: This security update provides a functional equivalent of RHSA-2024:3184. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2024:3184.

Patchnames: RHSA-2024:3184

CVE-2023-4692

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2023-4693

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 13 products, the same list as for CVE-2023-4692

Threats

Impact moderate

CVE-2024-1048

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 13 products, the same list as for CVE-2023-4692

Threats

Impact low

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2023-4692/	self
https://www.suse.com/security/cve/CVE-2023-4693/	self
https://www.suse.com/security/cve/CVE-2024-1048/	self
https://www.suse.com/security/cve/CVE-2023-4692	external
https://bugzilla.suse.com/1215935	external
https://bugzilla.suse.com/1217434	external
https://bugzilla.suse.com/1217555	external
https://bugzilla.suse.com/1219472	external
https://bugzilla.suse.com/1219709	external
https://bugzilla.suse.com/1221589	external
https://bugzilla.suse.com/1227915	external
https://www.suse.com/security/cve/CVE-2023-4693	external
https://bugzilla.suse.com/1215936	external
https://www.suse.com/security/cve/CVE-2024-1048	external
https://bugzilla.suse.com/1219669	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for grub2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2024:3184.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:3184.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2024:3184",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_3184.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-4692 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-4692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-4693 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-4693/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-1048 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-1048/"
      }
    ],
    "title": "security update for grub2",
    "tracking": {
      "current_release_date": "2026-09-20T11:39:35Z",
      "generator": {
        "date": "2024-05-22T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2024:3184",
      "initial_release_date": "2024-05-22T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-05-22T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:39:35Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grub2-common-1:2.02-156.el8.noarch",
                "product": {
                  "name": "grub2-common-1:2.02-156.el8.noarch",
                  "product_id": "grub2-common-1:2.02-156.el8.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:grub2:2.02:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/grub2-common@2.02-156.el8?arch=noarch\u0026epoch=1\u0026upstream=grub2-1:2.02-156.el8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
                "product": {
                  "name": "grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
                  "product_id": "grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-efi-ia32-modules@2.02-156.el8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-efi-x64-modules-1:2.02-156.el8.noarch",
                "product": {
                  "name": "grub2-efi-x64-modules-1:2.02-156.el8.noarch",
                  "product_id": "grub2-efi-x64-modules-1:2.02-156.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-efi-x64-modules@2.02-156.el8?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-pc-modules-1:2.02-156.el8.noarch",
                "product": {
                  "name": "grub2-pc-modules-1:2.02-156.el8.noarch",
                  "product_id": "grub2-pc-modules-1:2.02-156.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-pc-modules@2.02-156.el8?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grub2-efi-ia32-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-efi-ia32-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-efi-ia32-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-efi-ia32@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-efi-ia32-cdboot@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-efi-x64-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-efi-x64-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-efi-x64-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-efi-x64@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-efi-x64-cdboot@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-pc-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-pc-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-pc-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-pc@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-tools-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-tools-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-tools-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-tools@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-tools-efi-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-tools-efi-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-tools-efi-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-tools-efi@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-tools-extra-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-tools-extra-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-tools-extra-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-tools-extra@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grub2-tools-minimal-1:2.02-156.el8.x86_64",
                "product": {
                  "name": "grub2-tools-minimal-1:2.02-156.el8.x86_64",
                  "product_id": "grub2-tools-minimal-1:2.02-156.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/grub2-tools-minimal@2.02-156.el8?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 8",
                "product": {
                  "name": "SUSE Liberty Linux 8",
                  "product_id": "SUSE Liberty Linux 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-common-1:2.02-156.el8.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch"
        },
        "product_reference": "grub2-common-1:2.02-156.el8.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-efi-ia32-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-efi-ia32-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-efi-ia32-modules-1:2.02-156.el8.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch"
        },
        "product_reference": "grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-efi-x64-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-efi-x64-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-efi-x64-modules-1:2.02-156.el8.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch"
        },
        "product_reference": "grub2-efi-x64-modules-1:2.02-156.el8.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-pc-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-pc-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-pc-modules-1:2.02-156.el8.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch"
        },
        "product_reference": "grub2-pc-modules-1:2.02-156.el8.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-tools-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-tools-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-tools-efi-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-tools-efi-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-tools-extra-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-tools-extra-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grub2-tools-minimal-1:2.02-156.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
        },
        "product_reference": "grub2-tools-minimal-1:2.02-156.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-4692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-4692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds write flaw was found in grub2\u0027s NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub\u0027s heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-4692",
          "url": "https://www.suse.com/security/cve/CVE-2023-4692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215935 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1215935"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217434 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1217434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217555 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1217555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219472 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1219472"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219709 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1219709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221589 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1221589"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1227915 for CVE-2023-4692",
          "url": "https://bugzilla.suse.com/1227915"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-05-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-4692"
    },
    {
      "cve": "CVE-2023-4693",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-4693"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds read flaw was found on grub2\u0027s NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-4693",
          "url": "https://www.suse.com/security/cve/CVE-2023-4693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215936 for CVE-2023-4693",
          "url": "https://bugzilla.suse.com/1215936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-05-22T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-4693"
    },
    {
      "cve": "CVE-2024-1048",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-1048"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
          "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
          "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-1048",
          "url": "https://www.suse.com/security/cve/CVE-2024-1048"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219669 for CVE-2024-1048",
          "url": "https://bugzilla.suse.com/1219669"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:grub2-common-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-ia32-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-ia32-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-efi-x64-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-cdboot-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-efi-x64-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-pc-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-pc-modules-1:2.02-156.el8.noarch",
            "SUSE Liberty Linux 8:grub2-tools-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-efi-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-extra-1:2.02-156.el8.x86_64",
            "SUSE Liberty Linux 8:grub2-tools-minimal-1:2.02-156.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-05-22T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2024-1048"
    }
  ]
}

CVE-2023-4692 (GCVE-0-2023-4692)

Vulnerability from cvelistv5 – Published: 2023-10-25 10:27 – Updated: 2026-07-21 05:08

Title

Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

Summary

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-08-15 14:23 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

redhat redhat root

References

13 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2456	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3184	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4692	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2236613	issue-trackingx_refsource_REDHAT
https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023…
https://lists.gnu.org/archive/html/grub-devel/202…
https://seclists.org/oss-sec/2023/q4/37
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://security.gentoo.org/glsa/202311-14	x_transferred
https://security.netapp.com/advisory/ntap-2023120…	x_transferred
https://lists.debian.org/debian-lts-announce/2023…

Impacted products

4 products

Vendor	Product	Version
		Unaffected: 2.12 , < * (custom)
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:2.02-156.el8 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:2.06-77.el9 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2023-10-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:25:43.776Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2456"
          },
          {
            "name": "RHSA-2024:3184",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3184"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-4692"
          },
          {
            "name": "RHBZ#2236613",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236613"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUU42E7CPYLATXOYVYNW6YTXXULAOV6L/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRJ5UZRXX2KLR4IKBJEQUNGOCXMMDLY/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PERFILCHFEUGG3OAMC6W55P6DDIBZK4Q/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://seclists.org/oss-sec/2023/q4/37"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202311-14"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231208-0002/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4692",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-15T14:23:06.893381Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-17T17:19:59.141Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://git.savannah.gnu.org/git/grub.git/",
          "packageName": "grub",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.12",
              "versionType": "custom"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.02-156.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.06-77.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-10-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write flaw was found in grub2\u0027s NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub\u0027s heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T05:08:54.432Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2456"
        },
        {
          "name": "RHSA-2024:3184",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3184"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-4692"
        },
        {
          "name": "RHBZ#2236613",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236613"
        },
        {
          "url": "https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/"
        },
        {
          "url": "https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html"
        },
        {
          "url": "https://seclists.org/oss-sec/2023/q4/37"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-08-31T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-10-03T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-122: Heap-based Buffer Overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-4692",
    "datePublished": "2023-10-25T10:27:29.173Z",
    "dateReserved": "2023-08-31T21:53:09.692Z",
    "dateUpdated": "2026-07-21T05:08:54.432Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-4693 (GCVE-0-2023-4693)

Vulnerability from cvelistv5 – Published: 2023-10-25 10:27 – Updated: 2026-07-21 05:09

Title

Grub2: out-of-bounds read at fs/ntfs.c

Summary

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-125 - Out-of-bounds Read

Assigner

redhat redhat root

References

13 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2456	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3184	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4693	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2238343	issue-trackingx_refsource_REDHAT
https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023…
https://lists.gnu.org/archive/html/grub-devel/202…
https://seclists.org/oss-sec/2023/q4/37
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://security.gentoo.org/glsa/202311-14	x_transferred
https://security.netapp.com/advisory/ntap-2023120…	x_transferred
https://lists.debian.org/debian-lts-announce/2023…

Impacted products

3 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:2.02-156.el8 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:2.06-77.el9 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2023-10-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:25:44.865Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2456"
          },
          {
            "name": "RHSA-2024:3184",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3184"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-4693"
          },
          {
            "name": "RHBZ#2238343",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238343"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUU42E7CPYLATXOYVYNW6YTXXULAOV6L/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRJ5UZRXX2KLR4IKBJEQUNGOCXMMDLY/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PERFILCHFEUGG3OAMC6W55P6DDIBZK4Q/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://seclists.org/oss-sec/2023/q4/37"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202311-14"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231208-0002/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.02-156.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.06-77.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2023-10-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read flaw was found on grub2\u0027s NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T05:09:01.439Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2456"
        },
        {
          "name": "RHSA-2024:3184",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3184"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-4693"
        },
        {
          "name": "RHBZ#2238343",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238343"
        },
        {
          "url": "https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/"
        },
        {
          "url": "https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html"
        },
        {
          "url": "https://seclists.org/oss-sec/2023/q4/37"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-09-11T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-10-03T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Grub2: out-of-bounds read at fs/ntfs.c",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-4693",
    "datePublished": "2023-10-25T10:27:29.100Z",
    "dateReserved": "2023-08-31T21:53:46.147Z",
    "dateUpdated": "2026-07-21T05:09:01.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-1048 (GCVE-0-2024-1048)

Vulnerability from cvelistv5 – Published: 2024-02-06 17:30 – Updated: 2025-11-20 18:11

Title

Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

Summary

A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-26 20:13 UTC

CWE

CWE-459 - Incomplete Cleanup

Assigner

redhat redhat root

References

9 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:2456	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3184	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-1048	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2256827	issue-trackingx_refsource_REDHAT
https://www.openwall.com/lists/oss-security/2024/…
http://www.openwall.com/lists/oss-security/2024/02/06/3	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://lists.fedoraproject.org/archives/list/pac…	x_transferred
https://security.netapp.com/advisory/ntap-2024022…	x_transferred

Impacted products

5 products

Vendor	Product	Version
		Unaffected: 0 , < * (git)
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:2.02-156.el8 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:2.06-77.el9 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2024-02-06 00:00

Credits

Red Hat would like to thank Solar Designer (CIQ/Rocky Linux) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-1048",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-26T20:13:20.423927Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T18:00:34.193Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:26:30.341Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/02/06/3"
          },
          {
            "name": "RHSA-2024:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:2456"
          },
          {
            "name": "RHSA-2024:3184",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:3184"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-1048"
          },
          {
            "name": "RHBZ#2256827",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256827"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRZQCVZ3XOASVFT6XLO7F2ZXOLOHIJZQ/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YSJAEGRR3XHMBBBKYOVMII4P34IXEYPE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240223-0007/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2024/02/06/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/rhboot/grub2/",
          "defaultStatus": "unaffected",
          "packageName": "grub2",
          "versions": [
            {
              "changes": [
                {
                  "at": "5425919",
                  "status": "unaffected"
                }
              ],
              "lessThan": "*",
              "status": "unaffected",
              "version": "0",
              "versionType": "git"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.02-156.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.06-77.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grub",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grub2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Solar Designer (CIQ/Rocky Linux) for reporting this issue."
        }
      ],
      "datePublic": "2024-02-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-459",
              "description": "Incomplete Cleanup",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-20T18:11:20.016Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:2456"
        },
        {
          "name": "RHSA-2024:3184",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3184"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-1048"
        },
        {
          "name": "RHBZ#2256827",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256827"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2024/02/06/3"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-01-03T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-02-06T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Grub2: grub2-set-bootflag can be abused by local (pseudo-)users",
      "x_redhatCweChain": "CWE-459: Incomplete Cleanup"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-1048",
    "datePublished": "2024-02-06T17:30:35.360Z",
    "dateReserved": "2024-01-29T18:42:11.310Z",
    "dateUpdated": "2025-11-20T18:11:20.016Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2024:3184

CVE-2023-4692 (GCVE-0-2023-4692)

CVE-2023-4693 (GCVE-0-2023-4693)

CVE-2024-1048 (GCVE-0-2024-1048)

Tags

Sightings

Nomenclature

Related by attack behaviour