CVEvulnerability

CVE-2023-4693

4.6 MEDIUM Published 2023-10-25 Modified 2026-07-21 Official page ↗
Status
Modified
Published
2023-10-25
Last modified
2026-07-21
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125

Description

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.

Affected configurations

• gnu grub2 (< 2.12) • redhat enterprise linux 8.0 • redhat enterprise linux 9.0

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References