← CVE Intelligence

CVE-2023-4693

Grub2: out-of-bounds read at fs/ntfs.c PUBLISHED

Description (CNA)

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 1:2.02-156.el8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 1:2.06-77.el9 before *
Red Hat / Red Hat Enterprise Linux 7affected

CWE

CWE-125

References

ADP enrichment

CVE

No English description supplied.