{"id":"CVE-2023-4693","aliases":["ALSA-2024:2456","ALSA-2024:3184","AZL-31685","AZL-34794","BELL-CVE-2023-4693","CLSA-2024-1721204317","CLSA-2024-1724433427","CLSA-2024-1724434789","CLSA-2024-1724871398","CLSA-2025-1742374400","DEBIAN-CVE-2023-4693","DLA-3605-1","DSA-5519-1","EUVD-2023-54544","GHSA-r62p-gp92-7444","MGASA-2024-0095","OESA-2023-1720","RHSA-2024:2456","RHSA-2024:3184","RLSA-2024:3184","SUSE-SU-2023:4085-1","SUSE-SU-2023:4130-1","SUSE-SU-2023:4140-1","SUSE-SU-2023:4141-1","SUSE-SU-2025:01961-1","UBUNTU-CVE-2023-4693","USN-6410-1","openSUSE-SU-2024:13328-1"],"status":"published","title":"Grub2: out-of-bounds read at fs/ntfs.c","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00488,"percentile":0.42383,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-10-03T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"grub2","fixed_in":["2.06-13"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"grub2","fixed_in":["2.06-18"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"grub","fixed_in":["2.06-r17"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"grub","fixed_in":["2.06-r18"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-common","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32-cdboot","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32-modules","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64-modules","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-pc","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-pc-modules","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-efi","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-extra","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-minimal","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-common","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32-cdboot","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32-modules","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64-modules","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-pc","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-pc-modules","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-efi","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-extra","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-minimal","fixed_in":["1:2.02-106.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-common","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-aa64-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-efi","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-extra","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-minimal","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"grub2","fixed_in":["2.06-13+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"grub2","fixed_in":["2.12~rc1-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"grub2","fixed_in":["2.12~rc1-11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","fixed_in":["1.187.6~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"grub2-unsigned","fixed_in":["2.06-2ubuntu14.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","fixed_in":["1.187.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","fixed_in":["2.06-2ubuntu14.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"grub2-signed","fixed_in":["1.199"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-18"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"grub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.06-r9"},{"fixed":"2.06-r17"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"grub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.06-r14"},{"fixed":"2.06-r18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-i386-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.26.el7_9.14.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-13+deb12u1"}]}],"versions":["2.06-13"]},{"source":"osv","ecosystem":"Debian:13","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12~rc1-11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12~rc1-11"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-3~deb10u4"}]}],"versions":["2.02+dfsg1-20","2.02+dfsg1-20+deb10u1","2.02+dfsg1-20+deb10u2","2.02+dfsg1-20+deb10u3","2.02+dfsg1-20+deb10u4","2.04-1","2.04-1+sparc64","2.04-10","2.04-11","2.04-12","2.04-13","2.04-14","2.04-15","2.04-16","2.04-17","2.04-17+ia64","2.04-18","2.04-19","2.04-2","2.04-20","2.04-3","2.04-4","2.04-5","2.04-6","2.04-7","2.04-8","2.04-9","2.04~rc1-1","2.04~rc1-2","2.04~rc1-3","2.06-1","2.06-2","2.06-2+hurd.1","2.06-2+hurd.2","2.06-2+hurd.3","2.06-2+hurd.4","2.06-2+hurd.5","2.06-2+hurd.6","2.06-2+hurd.7","2.06-2+hurd.8","2.06-3~deb10u1","2.06-3~deb10u2","2.06-3~deb10u3"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-3~deb11u6"}]}],"versions":["2.04-20","2.06-1","2.06-2","2.06-2+hurd.1","2.06-2+hurd.2","2.06-2+hurd.3","2.06-2+hurd.4","2.06-2+hurd.5","2.06-2+hurd.6","2.06-2+hurd.7","2.06-2+hurd.8","2.06-3~deb10u1","2.06-3~deb10u2","2.06-3~deb10u3","2.06-3~deb10u4","2.06-3~deb11u1","2.06-3~deb11u2","2.06-3~deb11u4","2.06-3~deb11u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-13+deb12u1"}]}],"versions":["2.06-13"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-28.2.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-31.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-36.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-38.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-38.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-38.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-emu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-efi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-extra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"grub2-tools-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-77.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-156.el8.rocky.0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02-169.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02-169.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.38.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.38.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.38.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.38.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.38.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150500.29.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150500.29.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150500.29.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.3.11.1"}]}],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22","1.23","1.24","1.25","1.26","1.27","1.30","1.31","1.32","1.33","1.34","1.34.1","1.34.2","1.34.3","1.34.4","1.34.5","1.34.6","1.34.7","1.34.8","1.34.9","1.34.13","1.34.14","1.34.16","1.34.17","1.34.18","1.34.20","1.34.22","1.34.24"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.55","1.56","1.57","1.58","1.59","1.61","1.62","1.63","1.64","1.65","1.66","1.66.1","1.66.2","1.66.6","1.66.7","1.66.8","1.66.9","1.66.11","1.66.12","1.66.14","1.66.15","1.66.16","1.66.17","1.66.18","1.66.19","1.66.20","1.66.21","1.66.22","1.66.23","1.66.26","1.66.27","1.66.28","1.66.29","1.167~16.04.1","1.167~16.04.2","1.167~16.04.4","1.167~16.04.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.1","2.04-1ubuntu44.1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.85","1.86","1.87","1.89","1.91","1.92","1.93","1.93.1","1.93.2","1.93.3","1.93.4","1.93.5","1.93.7","1.93.8","1.93.10","1.93.11","1.93.13","1.93.14","1.93.15","1.93.16","1.93.18","1.93.19","1.93.20","1.93.21","1.93.22","1.93.24","1.167~18.04.1","1.167~18.04.3","1.167~18.04.5","1.173.2~18.04.1","1.187.2~18.04.1","1.187.3~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.1","2.04-1ubuntu44.1.2","2.04-1ubuntu47.4","2.06-2ubuntu14","2.06-2ubuntu14.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.6~20.04.1"}]}],"versions":["1.128","1.129","1.130","1.131","1.133","1.134","1.135","1.136","1.137","1.138","1.139","1.140","1.141","1.142","1.142.1","1.142.3","1.142.4","1.142.5","1.142.6","1.142.8","1.142.9","1.142.10","1.142.11","1.167","1.167.2","1.173.2~20.04.1","1.173.4","1.187.2~20.04.2","1.187.3~20.04.1","1.187.4~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.4"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.2","2.04-1ubuntu47.4","2.04-1ubuntu47.5","2.06-2ubuntu14","2.06-2ubuntu14.1","2.06-2ubuntu14.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.6"}]}],"versions":["1.173","1.174","1.176","1.177","1.178","1.179","1.180","1.182~22.04.1","1.187.2","1.187.3~22.04.1","1.187.4~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.4"}]}],"versions":["2.04-1ubuntu47","2.04-1ubuntu48","2.06-2ubuntu3","2.06-2ubuntu4","2.06-2ubuntu5","2.06-2ubuntu6","2.06-2ubuntu7","2.06-2ubuntu10","2.06-2ubuntu14","2.06-2ubuntu14.1","2.06-2ubuntu14.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.199"}]}],"versions":["1.197"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.6~20.04.1"}]}],"versions":["1.128","1.129","1.130","1.131","1.133","1.134","1.135","1.136","1.137","1.138","1.139","1.140","1.141","1.142","1.142.1","1.142.3","1.142.4","1.142.5","1.142.6","1.142.8","1.142.9","1.142.10","1.142.11","1.167","1.167.2","1.173.2~20.04.1","1.173.4","1.187.2~20.04.2","1.187.3~20.04.1","1.187.4~20.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.6"}]}],"versions":["1.173","1.174","1.176","1.177","1.178","1.179","1.180","1.182~22.04.1","1.187.2","1.187.3~22.04.1","1.187.4~22.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.4"}]}],"versions":["2.04-1ubuntu47","2.04-1ubuntu48","2.06-2ubuntu3","2.06-2ubuntu4","2.06-2ubuntu5","2.06-2ubuntu6","2.06-2ubuntu7","2.06-2ubuntu10","2.06-2ubuntu14","2.06-2ubuntu14.1","2.06-2ubuntu14.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12~rc1-5.1"}]}],"bundled":2}],"products":[{"vendor":"gnu","product":"grub2"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2456","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3184","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4693","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238343","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager/","tags":["x_transferred","Exploit","Third Party Advisory","evidence","article","report"]},{"url":"https://lists.gnu.org/archive/html/grub-devel/2023-10/msg00028.html","tags":["x_transferred","Mailing List","article","report"]},{"url":"https://seclists.org/oss-sec/2023/q4/37","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUU42E7CPYLATXOYVYNW6YTXXULAOV6L/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRJ5UZRXX2KLR4IKBJEQUNGOCXMMDLY/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PERFILCHFEUGG3OAMC6W55P6DDIBZK4Q/","tags":["x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202311-14","tags":["x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231208-0002/","tags":["x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00007.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4693","tags":["web","advisory"]},{"url":"https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager"},{"url":"https://security.netapp.com/advisory/ntap-20231208-0002"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRJ5UZRXX2KLR4IKBJEQUNGOCXMMDLY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUU42E7CPYLATXOYVYNW6YTXXULAOV6L"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PERFILCHFEUGG3OAMC6W55P6DDIBZK4Q"},{"url":"https://github.com/advisories/GHSA-r62p-gp92-7444"},{"url":"https://access.redhat.com/security/cve/CVE-2023-4692","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1048","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236613","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238343","tags":["report"]},{"url":"https://bugzilla.redhat.com/2256827","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2456.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3184.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-4693","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1721204317.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1724433427.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1724434789.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1724871398.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/oraclelinux7-els/CLSA-2025-1742374400.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-4693","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0095.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32997","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YSJAEGRR3XHMBBBKYOVMII4P34IXEYPE/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1720","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4692","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256827","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-1601","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-21368","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-26322","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2456.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4692","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4693","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1048","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2024/02/06/3","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4314","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4343","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3184.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3184","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234085-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204563","tags":["report"]},{"url":"https://bugzilla.suse.com/1215382","tags":["report"]},{"url":"https://bugzilla.suse.com/1215935","tags":["report"]},{"url":"https://bugzilla.suse.com/1215936","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4693","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234130-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201300","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234141-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501961-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1233606","tags":["report"]},{"url":"https://bugzilla.suse.com/1233608","tags":["report"]},{"url":"https://bugzilla.suse.com/1233609","tags":["report"]},{"url":"https://bugzilla.suse.com/1233610","tags":["report"]},{"url":"https://bugzilla.suse.com/1233612","tags":["report"]},{"url":"https://bugzilla.suse.com/1233613","tags":["report"]},{"url":"https://bugzilla.suse.com/1233614","tags":["report"]},{"url":"https://bugzilla.suse.com/1233615","tags":["report"]},{"url":"https://bugzilla.suse.com/1233616","tags":["report"]},{"url":"https://bugzilla.suse.com/1233617","tags":["report"]},{"url":"https://bugzilla.suse.com/1234958","tags":["report"]},{"url":"https://bugzilla.suse.com/1236316","tags":["report"]},{"url":"https://bugzilla.suse.com/1236317","tags":["report"]},{"url":"https://bugzilla.suse.com/1237002","tags":["report"]},{"url":"https://bugzilla.suse.com/1237006","tags":["report"]},{"url":"https://bugzilla.suse.com/1237008","tags":["report"]},{"url":"https://bugzilla.suse.com/1237009","tags":["report"]},{"url":"https://bugzilla.suse.com/1237010","tags":["report"]},{"url":"https://bugzilla.suse.com/1237011","tags":["report"]},{"url":"https://bugzilla.suse.com/1237012","tags":["report"]},{"url":"https://bugzilla.suse.com/1237013","tags":["report"]},{"url":"https://bugzilla.suse.com/1237014","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1125","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-4693","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6410-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-4692","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-4693","title":"Grub2: out-of-bounds read at fs/ntfs.c","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T10:27:29.1Z","modified":"2026-11-07T11:32:46.207Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-07T12:33:58.237937Z"}],"euvd":[{"id":"EUVD-2023-54544","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T10:27:29Z","modified":"2026-11-07T11:32:46Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-07T12:09:17.956424Z"}],"ghsa":[{"id":"GHSA-r62p-gp92-7444","title":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a...","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T18:32:25Z","modified":"2025-11-04T21:30:45Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:04:36.009389Z"}],"nvd":[{"id":"CVE-2023-4693","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T18:17:41.817Z","modified":"2026-11-07T12:17:38.117Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-07T14:05:24.982965Z"}],"osv":[{"id":"AZL-31685","title":"CVE-2023-4693 affecting package grub2 for versions less than 2.06-13","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T18:17:41Z","modified":"2026-04-21T04:26:27.042088Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34794","title":"CVE-2023-4693 affecting package grub2 for versions less than 2.06-18","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T18:17:41Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2023-4693","status":"published","published":"2023-10-11T13:25:55.981239Z","modified":"2026-01-26T09:35:34.315167Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-4693","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T18:17:41.817Z","modified":"2026-04-16T04:31:23.356267101Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-4693","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-25T18:17:41.817Z","modified":"2026-11-08T09:47:33.789652534Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-08T10:03:28.621517Z"},{"id":"OESA-2023-1720","title":"grub2 security update","description":"GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds write flaw was found in grub2\u0026apos;s NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub\u0026apos;s heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.(CVE-2023-4692)\r\n\r\nAn out-of-bounds read flaw was found on grub2\u0026apos;s NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.(CVE-2023-4693)","status":"published","published":"2023-10-13T11:06:10Z","modified":"2026-08-18T01:17:54.303227557Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2024:2456","title":"Red Hat Security Advisory: grub2 security update","status":"published","published":"2024-09-16T16:09:10Z","modified":"2026-07-21T10:02:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3184","title":"Red Hat Security Advisory: grub2 security update","status":"published","published":"2024-09-16T16:09:19Z","modified":"2026-07-21T10:03:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-4693","description":"An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.","status":"published","published":"2023-10-03T00:00:00Z","modified":"2026-02-04T02:46:56.414322Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:2456","title":"Moderate: grub2 security update","description":"The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.\n\nSecurity Fix(es):\n\n* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)\n* grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)\n* grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:44.078132247Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3184","title":"Moderate: grub2 security update","description":"The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.\n\nSecurity Fix(es):\n\n* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)\n* grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)\n* grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:26.321879863Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1721204317","title":"grub2: Fix of 2 CVEs","description":"- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never\n  written beyond the boundary\n- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver","status":"published","published":"2024-07-17T08:20:41Z","modified":"2026-06-01T00:33:17.541130534Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1724433427","title":"grub2: Fix of CVE-2023-4693","description":"- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver","status":"published","published":"2024-08-23T17:23:38Z","modified":"2026-06-01T00:33:20.579549762Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1724434789","title":"grub2: Fix of CVE-2023-4693","description":"- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver","status":"published","published":"2024-08-23T17:39:52Z","modified":"2026-06-01T00:33:22.771530322Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1724871398","title":"grub2: Fix of CVE-2023-4693","description":"- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver","status":"published","published":"2024-08-28T18:58:18Z","modified":"2026-06-01T00:30:18.116045638Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1742374400","title":"grub2: Fix of 2 CVEs","description":"- Sign by Cloudlinux\n- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never\n  written beyond the boundary\n- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver","status":"published","published":"2025-03-19T09:11:09Z","modified":"2026-06-01T00:33:26.175426141Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-3605-1","title":"grub2 - security update","status":"published","published":"2023-10-06T00:00:00Z","modified":"2026-03-09T02:08:56.783876Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5519-1","title":"grub2 - security update","status":"published","published":"2023-10-06T00:00:00Z","modified":"2026-03-09T02:09:35.210993Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0095","title":"Updated grub2 packages fix security vulnerabilities","description":"An out-of-bounds write flaw was found in grub2's NTFS filesystem driver.\nThis issue may allow an attacker to present a specially crafted NTFS\nfilesystem image, leading to grub's heap metadata corruption. In some\ncircumstances, the attack may also corrupt the UEFI firmware heap\nmetadata. As a result, arbitrary code execution and secure boot\nprotection bypass may be achieved. (CVE-2023-4692)\nAn out-of-bounds read flaw was found on grub2's NTFS filesystem driver.\nThis issue may allow a physically present attacker to present a\nspecially crafted NTFS file system image to read arbitrary memory\nlocations. A successful attack allows sensitive data cached in memory or\nEFI variable values to be leaked, presenting a high Confidentiality\nrisk. (CVE-2023-4693)\nAn authentication bypass flaw was found in GRUB due to the way that GRUB\nuses the UUID of a device to search for the configuration file that\ncontains the password hash for the GRUB password protection feature. An\nattacker capable of attaching an external drive such as a USB stick\ncontaining a file system with a duplicate UUID (the same as in the\n\"/boot/\" file system) can bypass the GRUB password protection feature on\nUEFI systems, which enumerate removable drives before non-removable\nones. (CVE-2023-4001)\nA flaw was found in the grub2-set-bootflag utility of grub2. After the\nfix of CVE-2019-14865, grub2-set-bootflag will create a temporary file\nwith the new grubenv content and rename it to the original grubenv file.\nIf the program is killed before the rename operation, the temporary file\nwill not be removed and may fill the filesystem when invoked multiple\ntimes, resulting in a filesystem out of free inodes or blocks.\n(CVE-2024-1048)\n","status":"published","published":"2024-03-28T03:52:55Z","modified":"2026-04-16T04:41:31.114323227Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13328-1","title":"grub2-2.12~rc1-5.1 on GA media","description":"These are all security issues fixed in the grub2-2.12~rc1-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:52:55.890908Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2024:3184","title":"Moderate: grub2 security update","description":"The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.\n\nSecurity Fix(es):\n\n* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)\n\n* grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)\n\n* grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:16.809606Z","modified":"2026-02-05T14:45:04.091438Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:4085-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nSecurity fixes:\n- CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)\n- CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)\n\nOther fixes:\n- Fix 'command not found' error of grub2-once (bsc#1204563, bsc#1215382)\n","status":"published","published":"2023-10-16T09:32:02Z","modified":"2026-02-04T04:17:46.504487Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:4130-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)\n- CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)\n","status":"published","published":"2023-10-19T07:54:10Z","modified":"2026-02-04T02:26:07.811376Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4140-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nSecurity fixes:\n- CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)\n- CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)\n\nOther fixes:\n- Fix a boot delay issue in PowerPC PXE boot (bsc#1201300)\n","status":"published","published":"2023-10-20T09:34:14Z","modified":"2026-02-04T02:56:55.442263Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4141-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nSecurity fixes:\n- CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)\n- CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)\n\nOther fixes:\n- Fix a boot delay issue in PowerPC PXE boot (bsc#1201300)\n","status":"published","published":"2023-10-20T09:34:54Z","modified":"2026-02-04T02:57:08.768439Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2025:01961-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2023-4692: nfs: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (bsc#1215935).\n- CVE-2023-4693: nfs: out-of-bounds read at fs/ntfs.c (bsc#1215936).\n- CVE-2024-45774: heap overflows in JPEG parser (bsc#1233609).\n- CVE-2024-45775: missing NULL check in extcmd parser (bsc#1233610).\n- CVE-2024-45776: overflow in .MO file (gettext) handling (bsc#1233612).\n- CVE-2024-45777: integer overflow in gettext (bsc#1233613).\n- CVE-2024-45778: bfs filesystem not fuzzing stable (bsc#1233606).\n- CVE-2024-45779: bfs: heap overflow (bsc#1233608).\n- CVE-2024-45780: overflow in tar/cpio (bsc#1233614).\n- CVE-2024-45781: ufs: strcpy overflow (bsc#1233617).\n- CVE-2024-45782: hfs: strcpy overflow (bsc#1233615).\n- CVE-2024-45783: hfsplus: refcount overflow (bsc#1233616).\n- CVE-2024-56737: heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem (bsc#1234958).\n- CVE-2025-0622: command/gpg: Use-after-free due to hooks not being removed on module unload (bsc#1236317).\n- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_config_file() (bsc#1236316).\n- CVE-2025-0677: ufs: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (bsc#1237002).\n- CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data (bsc#1237006).\n- CVE-2025-0684: reiserfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237008).\n- CVE-2025-0685: jfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237009).\n- CVE-2025-0686: romfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237010).\n- CVE-2025-0689: udf: Heap based buffer overflow  in grub_udf_read_block() may lead to arbitrary code execution (bsc#1237011).\n- CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write (bsc#1237012).\n- CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled (bsc#1237013).\n- CVE-2025-1125: fs/hfs: Interger overflow may lead to heap based out-of-bounds write (bsc#1237014).\n\nOther bugfixes:\n\n- Bump upstream SBAT generation to 5\n","status":"published","published":"2025-06-16T10:03:22Z","modified":"2026-03-23T04:46:24.71525Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"USN-6410-1","title":"grub2-signed, grub2-unsigned vulnerabilities","description":"It was discovered that a specially crafted file system image could cause a\nheap-based out-of-bounds write. A local attacker could potentially use this\nto perform arbitrary code execution bypass and bypass secure boot\nprotections. (CVE-2023-4692)\n\nIt was discovered that a specially crafted file system image could cause an\nout-of-bounds read. A physically-present attacker could possibly use this\nto leak sensitive information to the GRUB pager. (CVE-2023-4693)\n","status":"published","published":"2023-10-04T01:31:42Z","modified":"2026-04-27T16:53:45.96261Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}