PT-2024-1073 · Grub2+4 · Grub2+4

Msuhanov · Published 2024-01-09 · Updated 2025-05-12 · CVE-2023-4001

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GRUB2 versions (affected versions not specified)

Description An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID can bypass the GRUB password protection feature on UEFI systems. This issue was introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

ALSA-2024:0468

ALT-PU-2024-11222

ALT-PU-2025-2525

ALT-PU-2025-4232

ALT-PU-2025-6088

BDU:2024-00324

CVE-2023-4001

MGASA-2024-0095

RHSA-2024:0437

RHSA-2024:0456

RHSA-2024:0468

RHSA-2024_0468

Affected Products

Alt Linux

Almalinux

Grub2

Red Hat

Red Os

References · 47

• https://lists.fedoraproject.org/archives/list/[e-mail]/message/YSJAEGRR3XHMBBBKYOVMII4P34IXEYPE · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-4001 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:0456 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:0437 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-0468.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0095.html · Security Note
• https://cve.org/CVERecord?id=CVE-2023-4001 · Security Note
• https://access.redhat.com/errata/RHSA-2024:0468 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4001 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0095 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/CHLZQ47HM64NDOHMHYO7VIJFYD5ZPPYN · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0468.html · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3OBADMKHQLJOBA32Q7XPNSYMVHVAFDCB · Vendor Advisory