PT-2023-6116 · Grub2+10 · Grub2+10

Maxim Suhanov · CVE-2023-4692 · Published 2023-10-03 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Grub2 (affected versions not specified)

Description An out-of-bounds write flaw was found in Grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to Grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-125

CWE-787

CWE-122

Related Identifiers

ALSA-2024:2456

ALSA-2024:3184

ALSA-2024_2456

ALSA-2024_3184

ALT-PU-2024-11222

ALT-PU-2024-1455

ALT-PU-2024-1457

ALT-PU-2024-1607

ALT-PU-2024-1609

ALT-PU-2024-1869

ALT-PU-2024-4050

AZL-31686

AZL-34795

BDU:2023-06578

BDU:2023-06822

CESA-2024_3184

CVE-2023-4692

DLA-3605-1

DSA-5519-1

ELSA-2024-2456

ELSA-2024-3184

INFSA-2024_2456

INFSA-2024_3184

MGASA-2024-0095

OESA-2023-1720

OPENSUSE-SU-2024:13328-1

RHSA-2024:2456

RHSA-2024:3184

RHSA-2024_2456

RHSA-2024_3184

RLSA-2024:3184

RLSA-2024_3184

ROSA-SA-2025-2606

SUSE-SU-2023:4085-1

SUSE-SU-2023:4130-1

SUSE-SU-2023:4140-1

SUSE-SU-2023:4141-1

SUSE-SU-2023_4085-1

SUSE-SU-2023_4130-1

SUSE-SU-2023_4140-1

SUSE-SU-2023_4141-1

SUSE-SU-2025:01961-1

USN-6410-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Grub2

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 140

• 🔥 https://dfir.ru/2023/10/03/cve-2023-4692-cve-2023-4693-vulnerabilities-in-the-grub-boot-manager · Exploit
• https://errata.almalinux.org/8/ALSA-2024-3184.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4140-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4141-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-4693 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-31686 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:3184 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6410-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6410-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34795 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0095.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4692 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-3184.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4692 · Security Note