CVE-2023-4949 — Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation

CVE-2023-4949

Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation PUBLISHED

Description (CNA)

An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

Affected (CNA)

Vendor / product	Versions
Free Software Foundation / Grub-Legacy	affected 0 through 0.97

CWE

CWE-119, CWE-190

References

https://xenbits.xenproject.org/xsa/advisory-443.html

ADP enrichment

CVE

No English description supplied.

https://xenbits.xenproject.org/xsa/advisory-443.html

CISA-ADP

No English description supplied.

No references supplied.