Red Hat Security Advisory: grub2 security update

Fixed packages 23

Vulnerabilities 3

• High 7.5
  CVE-2023-4692

  Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

  An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Oct 25, 2023
• Medium 5.3
  CVE-2023-4693

  Grub2: out-of-bounds read at fs/ntfs.c

  An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cach…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Oct 25, 2023
• Low 3.3
  CVE-2024-1048

  Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

  A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename o…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux
  Feb 6, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236613
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238343
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256827
• article
  https://issues.redhat.com/browse/RHEL-1601
• article
  https://issues.redhat.com/browse/RHEL-21368
• article
  https://issues.redhat.com/browse/RHEL-26322
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2456.json
• report
  https://access.redhat.com/security/cve/CVE-2023-4692
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4692
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4692
• article
  https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/
• article
  https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html
• article
  https://seclists.org/oss-sec/2023/q4/37
• report
  https://access.redhat.com/security/cve/CVE-2023-4693
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-4693
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-4693
• report
  https://access.redhat.com/security/cve/CVE-2024-1048
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-1048
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-1048
• article
  https://www.openwall.com/lists/oss-security/2024/02/06/3