An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-grub2-commonalma-upgrade-grub2-efi-aa64alma-upgrade-grub2-efi-aa64-cdbootalma-upgrade-grub2-efi-aa64-modulesalma-upgrade-grub2-efi-ia32alma-upgrade-grub2-efi-ia32-cdbootalma-upgrade-grub2-efi-ia32-modulesalma-upgrade-grub2-efi-x64alma-upgrade-grub2-efi-x64-cdbootalma-upgrade-grub2-efi-x64-modulesalma-upgrade-grub2-pcalma-upgrade-grub2-pc-modulesalma-upgrade-grub2-ppc64lealma-upgrade-grub2-ppc64le-modulesalma-upgrade-grub2-toolsalma-upgrade-grub2-tools-efialma-upgrade-grub2-tools-extraalma-upgrade-grub2-tools-minimal | May 13, 2024 | Oct 25, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-grub2amazon-linux-ami-2-upgrade-grub2-commonamazon-linux-ami-2-upgrade-grub2-debuginfoamazon-linux-ami-2-upgrade-grub2-efi-aa64amazon-linux-ami-2-upgrade-grub2-efi-aa64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-aa64-ec2amazon-linux-ami-2-upgrade-grub2-efi-aa64-modulesamazon-linux-ami-2-upgrade-grub2-efi-x64amazon-linux-ami-2-upgrade-grub2-efi-x64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-x64-ec2amazon-linux-ami-2-upgrade-grub2-efi-x64-modulesamazon-linux-ami-2-upgrade-grub2-emuamazon-linux-ami-2-upgrade-grub2-emu-modulesamazon-linux-ami-2-upgrade-grub2-pcamazon-linux-ami-2-upgrade-grub2-pc-modulesamazon-linux-ami-2-upgrade-grub2-toolsamazon-linux-ami-2-upgrade-grub2-tools-efiamazon-linux-ami-2-upgrade-grub2-tools-extraamazon-linux-ami-2-upgrade-grub2-tools-minimal | Oct 23, 2023 | Oct 23, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-grub2-commonamazon-linux-2023-upgrade-grub2-debuginfoamazon-linux-2023-upgrade-grub2-debugsourceamazon-linux-2023-upgrade-grub2-efi-aa64amazon-linux-2023-upgrade-grub2-efi-aa64-cdbootamazon-linux-2023-upgrade-grub2-efi-aa64-ec2amazon-linux-2023-upgrade-grub2-efi-aa64-modulesamazon-linux-2023-upgrade-grub2-efi-x64amazon-linux-2023-upgrade-grub2-efi-x64-cdbootamazon-linux-2023-upgrade-grub2-efi-x64-ec2amazon-linux-2023-upgrade-grub2-efi-x64-modulesamazon-linux-2023-upgrade-grub2-emuamazon-linux-2023-upgrade-grub2-emu-debuginfoamazon-linux-2023-upgrade-grub2-emu-modulesamazon-linux-2023-upgrade-grub2-pcamazon-linux-2023-upgrade-grub2-pc-modulesamazon-linux-2023-upgrade-grub2-toolsamazon-linux-2023-upgrade-grub2-tools-debuginfoamazon-linux-2023-upgrade-grub2-tools-efiamazon-linux-2023-upgrade-grub2-tools-efi-debuginfoamazon-linux-2023-upgrade-grub2-tools-extraamazon-linux-2023-upgrade-grub2-tools-extra-debuginfoamazon-linux-2023-upgrade-grub2-tools-minimalamazon-linux-2023-upgrade-grub2-tools-minimal-debuginfo | Feb 17, 2025 | Oct 3, 2023 | |
| Debian | debian-upgrade-grub2 | Oct 10, 2023 | Oct 10, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-grub2-commonhuawei-euleros-2_0_sp10-upgrade-grub2-efi-x64huawei-euleros-2_0_sp10-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp10-upgrade-grub2-pchuawei-euleros-2_0_sp10-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp10-upgrade-grub2-toolshuawei-euleros-2_0_sp10-upgrade-grub2-tools-efihuawei-euleros-2_0_sp10-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp10-upgrade-grub2-tools-minimal | Jan 10, 2024 | Oct 25, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-grub2-commonhuawei-euleros-2_0_sp11-upgrade-grub2-efi-x64huawei-euleros-2_0_sp11-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp11-upgrade-grub2-pchuawei-euleros-2_0_sp11-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp11-upgrade-grub2-toolshuawei-euleros-2_0_sp11-upgrade-grub2-tools-efihuawei-euleros-2_0_sp11-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp11-upgrade-grub2-tools-minimal | Jan 10, 2024 | Oct 25, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-grub2huawei-euleros-2_0_sp5-upgrade-grub2-commonhuawei-euleros-2_0_sp5-upgrade-grub2-efi-ia32huawei-euleros-2_0_sp5-upgrade-grub2-efi-ia32-cdboothuawei-euleros-2_0_sp5-upgrade-grub2-efi-x64huawei-euleros-2_0_sp5-upgrade-grub2-efi-x64-cdboothuawei-euleros-2_0_sp5-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp5-upgrade-grub2-pchuawei-euleros-2_0_sp5-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp5-upgrade-grub2-toolshuawei-euleros-2_0_sp5-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp5-upgrade-grub2-tools-minimal | Feb 12, 2024 | Oct 25, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-grub2-commonhuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-cdboothuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp8-upgrade-grub2-toolshuawei-euleros-2_0_sp8-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp8-upgrade-grub2-tools-minimal | Mar 13, 2024 | Oct 25, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-grub2-commonhuawei-euleros-2_0_sp9-upgrade-grub2-efi-x64huawei-euleros-2_0_sp9-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp9-upgrade-grub2-pchuawei-euleros-2_0_sp9-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp9-upgrade-grub2-toolshuawei-euleros-2_0_sp9-upgrade-grub2-tools-efihuawei-euleros-2_0_sp9-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp9-upgrade-grub2-tools-minimal | Jan 10, 2024 | Oct 25, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Feb 11, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-grub2-commonoracle-linux-upgrade-grub2-efi-aa64oracle-linux-upgrade-grub2-efi-aa64-cdbootoracle-linux-upgrade-grub2-efi-aa64-modulesoracle-linux-upgrade-grub2-efi-ia32oracle-linux-upgrade-grub2-efi-ia32-cdbootoracle-linux-upgrade-grub2-efi-ia32-modulesoracle-linux-upgrade-grub2-efi-x64oracle-linux-upgrade-grub2-efi-x64-cdbootoracle-linux-upgrade-grub2-efi-x64-modulesoracle-linux-upgrade-grub2-pcoracle-linux-upgrade-grub2-pc-modulesoracle-linux-upgrade-grub2-toolsoracle-linux-upgrade-grub2-tools-efioracle-linux-upgrade-grub2-tools-extraoracle-linux-upgrade-grub2-tools-minimal | May 7, 2024 | Oct 3, 2023 |
| Redhat_linux | redhat-upgrade-grub2-commonredhat-upgrade-grub2-debuginforedhat-upgrade-grub2-debugsourceredhat-upgrade-grub2-efi-aa64-modulesredhat-upgrade-grub2-efi-ia32redhat-upgrade-grub2-efi-ia32-cdbootredhat-upgrade-grub2-efi-ia32-modulesredhat-upgrade-grub2-efi-x64redhat-upgrade-grub2-efi-x64-cdbootredhat-upgrade-grub2-efi-x64-modulesredhat-upgrade-grub2-emu-debuginforedhat-upgrade-grub2-pcredhat-upgrade-grub2-pc-modulesredhat-upgrade-grub2-ppc64le-modulesredhat-upgrade-grub2-toolsredhat-upgrade-grub2-tools-debuginforedhat-upgrade-grub2-tools-efiredhat-upgrade-grub2-tools-efi-debuginforedhat-upgrade-grub2-tools-extraredhat-upgrade-grub2-tools-extra-debuginforedhat-upgrade-grub2-tools-minimalredhat-upgrade-grub2-tools-minimal-debuginfo | May 1, 2024 | Oct 25, 2023 | |
| Rocky_linux | rocky-upgrade-grub2-debuginforocky-upgrade-grub2-debugsourcerocky-upgrade-grub2-efi-ia32rocky-upgrade-grub2-efi-ia32-cdbootrocky-upgrade-grub2-efi-x64rocky-upgrade-grub2-efi-x64-cdbootrocky-upgrade-grub2-pcrocky-upgrade-grub2-toolsrocky-upgrade-grub2-tools-debuginforocky-upgrade-grub2-tools-efirocky-upgrade-grub2-tools-efi-debuginforocky-upgrade-grub2-tools-extrarocky-upgrade-grub2-tools-extra-debuginforocky-upgrade-grub2-tools-minimalrocky-upgrade-grub2-tools-minimal-debuginfo | Jun 17, 2024 | Oct 25, 2023 | |
| Suse | — | suse-upgrade-grub2suse-upgrade-grub2-arm64-efisuse-upgrade-grub2-arm64-efi-debugsuse-upgrade-grub2-arm64-efi-extrassuse-upgrade-grub2-branding-upstreamsuse-upgrade-grub2-i386-efi-extrassuse-upgrade-grub2-i386-pcsuse-upgrade-grub2-i386-pc-debugsuse-upgrade-grub2-i386-pc-extrassuse-upgrade-grub2-i386-xen-extrassuse-upgrade-grub2-powerpc-ieee1275suse-upgrade-grub2-powerpc-ieee1275-debugsuse-upgrade-grub2-powerpc-ieee1275-extrassuse-upgrade-grub2-s390x-emususe-upgrade-grub2-s390x-emu-debugsuse-upgrade-grub2-s390x-emu-extrassuse-upgrade-grub2-snapper-pluginsuse-upgrade-grub2-systemd-sleep-pluginsuse-upgrade-grub2-x86_64-efisuse-upgrade-grub2-x86_64-efi-debugsuse-upgrade-grub2-x86_64-efi-extrassuse-upgrade-grub2-x86_64-xensuse-upgrade-grub2-x86_64-xen-extras | Oct 17, 2023 | Oct 16, 2023 |
| Ubuntu | ubuntu-upgrade-grub-efi-amd64ubuntu-upgrade-grub-efi-amd64-binubuntu-upgrade-grub-efi-amd64-signedubuntu-upgrade-grub-efi-arm64ubuntu-upgrade-grub-efi-arm64-binubuntu-upgrade-grub-efi-arm64-signed | Oct 6, 2023 | Oct 4, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub