Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ALAS2-2023-2292

Related Vulnerabilities: CVE-2023-4692   CVE-2023-4693  

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved. (CVE-2023-4692) An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk. (CVE-2023-4693)

Source

ALAS2-2023-2292

Amazon Linux 2 Security Advisory: ALAS-2023-2292
Advisory Release Date: 2023-10-12 15:08 Pacific
Advisory Updated Date: 2023-10-19 23:40 Pacific
Severity: Important
Issue Overview:

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved. (CVE-2023-4692)

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk. (CVE-2023-4693)


Affected Packages:

grub2


Issue Correction:
Run yum update grub2 to update your system.

New Packages:
aarch64:
    grub2-2.06-14.amzn2.0.2.aarch64
    grub2-tools-2.06-14.amzn2.0.2.aarch64
    grub2-tools-minimal-2.06-14.amzn2.0.2.aarch64
    grub2-tools-extra-2.06-14.amzn2.0.2.aarch64
    grub2-efi-aa64-2.06-14.amzn2.0.2.aarch64
    grub2-efi-aa64-ec2-2.06-14.amzn2.0.2.aarch64
    grub2-efi-aa64-cdboot-2.06-14.amzn2.0.2.aarch64
    grub2-emu-2.06-14.amzn2.0.2.aarch64
    grub2-emu-modules-2.06-14.amzn2.0.2.aarch64
    grub2-debuginfo-2.06-14.amzn2.0.2.aarch64

noarch:
    grub2-common-2.06-14.amzn2.0.2.noarch
    grub2-efi-x64-modules-2.06-14.amzn2.0.2.noarch
    grub2-pc-modules-2.06-14.amzn2.0.2.noarch
    grub2-efi-aa64-modules-2.06-14.amzn2.0.2.noarch

src:
    grub2-2.06-14.amzn2.0.2.src

x86_64:
    grub2-2.06-14.amzn2.0.2.x86_64
    grub2-tools-2.06-14.amzn2.0.2.x86_64
    grub2-tools-efi-2.06-14.amzn2.0.2.x86_64
    grub2-tools-minimal-2.06-14.amzn2.0.2.x86_64
    grub2-tools-extra-2.06-14.amzn2.0.2.x86_64
    grub2-efi-x64-2.06-14.amzn2.0.2.x86_64
    grub2-efi-x64-ec2-2.06-14.amzn2.0.2.x86_64
    grub2-efi-x64-cdboot-2.06-14.amzn2.0.2.x86_64
    grub2-pc-2.06-14.amzn2.0.2.x86_64
    grub2-emu-2.06-14.amzn2.0.2.x86_64
    grub2-emu-modules-2.06-14.amzn2.0.2.x86_64
    grub2-debuginfo-2.06-14.amzn2.0.2.x86_64

Additional References

Red Hat: CVE-2023-4692, CVE-2023-4693

Mitre: CVE-2023-4692, CVE-2023-4693

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started