CVE-2023-4692

grub-efi-amd64-bin: An out-of-bounds write flaw was found in grub2's NTFS filesystem driver.This issue may allow an attacker to present a...

CVE-2023-4692 is fixed in 38 products on 1 platform, first by grub-efi-amd64 2.06-2ubuntu14.4, released October 2, 2023. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0054
45th percentile

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver.This issue may allow an attacker to present a specially crafted NTFSfilesystem image, leading to grub's heap metadata corruption. In somecircumstances, the attack may also corrupt the UEFI firmware heap metadata.As a result, arbitrary code execution and secure boot protection bypass maybe achieved.

Where it's fixed

ProductFixed inFixReleased
Linux
grub-efi-amd64 · Ubuntu 20.04 LTS (focal) 2.06-2ubuntu14.4 grub-efi-amd64 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-amd64 · Ubuntu 22.04.1 LTS (jammy) 2.06-2ubuntu14.4 grub-efi-amd64 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-amd64 · Ubuntu 24.04.5 LTS (noble) 2.12~rc1-10ubuntu4 grub-efi-amd64 2.12~rc1-10ubuntu4 Oct 2, 2023
grub-efi-amd64 · Ubuntu 24.10 (oracular) 2.12~rc1-10ubuntu4 grub-efi-amd64 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-amd64 · Ubuntu 25.04 (plucky) 2.12~rc1-10ubuntu4 grub-efi-amd64 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-amd64-bin · Ubuntu 20.04 LTS (focal) 2.06-2ubuntu14.4 grub-efi-amd64-bin 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-amd64-bin · Ubuntu 22.04.1 LTS (jammy) 2.06-2ubuntu14.4 grub-efi-amd64-bin 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-amd64-bin · Ubuntu 24.04.5 LTS (noble) 2.12~rc1-10ubuntu4 grub-efi-amd64-bin 2.12~rc1-10ubuntu4 Oct 2, 2023
grub-efi-amd64-bin · Ubuntu 24.10 (oracular) 2.12~rc1-10ubuntu4 grub-efi-amd64-bin 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-amd64-bin · Ubuntu 25.04 (plucky) 2.12~rc1-10ubuntu4 grub-efi-amd64-bin 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-amd64-signed · Ubuntu 20.04 LTS (focal) 1.187.6~20.04.1+2.06-2ubuntu14.4 grub-efi-amd64-signed 1.187.6~20.04.1+2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-amd64-signed · Ubuntu 22.04.1 LTS (jammy) 1.187.6+2.06-2ubuntu14.4 grub-efi-amd64-signed 1.187.6+2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-amd64-signed · Ubuntu 24.04.5 LTS (noble) 1.197+2.12~rc1-10ubuntu4 grub-efi-amd64-signed 1.197+2.12~rc1-10ubuntu4 Oct 2, 2023
grub-efi-amd64-signed · Ubuntu 24.10 (oracular) 1.197 grub-efi-amd64-signed 1.197 Oct 3, 2023
grub-efi-amd64-signed · Ubuntu 25.04 (plucky) 1.197 grub-efi-amd64-signed 1.197 Oct 3, 2023
grub-efi-amd64-unsigned · Ubuntu 25.04 (plucky) 2.12~rc1-10ubuntu4 grub-efi-amd64-unsigned 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-arm64 · Ubuntu 20.04 LTS (focal) 2.06-2ubuntu14.4 grub-efi-arm64 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-arm64 · Ubuntu 22.04.1 LTS (jammy) 2.06-2ubuntu14.4 grub-efi-arm64 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-arm64 · Ubuntu 24.04.5 LTS (noble) 2.12~rc1-10ubuntu4 grub-efi-arm64 2.12~rc1-10ubuntu4 Oct 2, 2023
grub-efi-arm64 · Ubuntu 24.10 (oracular) 2.12~rc1-10ubuntu4 grub-efi-arm64 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-arm64 · Ubuntu 25.04 (plucky) 2.12~rc1-10ubuntu4 grub-efi-arm64 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-arm64-bin · Ubuntu 20.04 LTS (focal) 2.06-2ubuntu14.4 grub-efi-arm64-bin 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-arm64-bin · Ubuntu 22.04.1 LTS (jammy) 2.06-2ubuntu14.4 grub-efi-arm64-bin 2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-arm64-bin · Ubuntu 24.04.5 LTS (noble) 2.12~rc1-10ubuntu4 grub-efi-arm64-bin 2.12~rc1-10ubuntu4 Oct 2, 2023
grub-efi-arm64-bin · Ubuntu 24.10 (oracular) 2.12~rc1-10ubuntu4 grub-efi-arm64-bin 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-arm64-bin · Ubuntu 25.04 (plucky) 2.12~rc1-10ubuntu4 grub-efi-arm64-bin 2.12~rc1-10ubuntu4 Oct 3, 2023
grub-efi-arm64-signed · Ubuntu 20.04 LTS (focal) 1.187.6~20.04.1+2.06-2ubuntu14.4 grub-efi-arm64-signed 1.187.6~20.04.1+2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-arm64-signed · Ubuntu 22.04.1 LTS (jammy) 1.187.6+2.06-2ubuntu14.4 grub-efi-arm64-signed 1.187.6+2.06-2ubuntu14.4 Oct 2, 2023
grub-efi-arm64-signed · Ubuntu 24.04.5 LTS (noble) 1.197+2.12~rc1-10ubuntu4 grub-efi-arm64-signed 1.197+2.12~rc1-10ubuntu4 Oct 2, 2023
grub-efi-arm64-signed · Ubuntu 24.10 (oracular) 1.197 grub-efi-arm64-signed 1.197 Oct 3, 2023
grub-efi-arm64-signed · Ubuntu 25.04 (plucky) 1.197 grub-efi-arm64-signed 1.197 Oct 3, 2023
grub-efi-arm64-unsigned · Ubuntu 25.04 (plucky) 2.12~rc1-10ubuntu4 grub-efi-arm64-unsigned 2.12~rc1-10ubuntu4 Oct 3, 2023
grub2 · Debian 11.6 (bullseye) 2.06-3~deb11u6 DSA-5519-1 Oct 6, 2023
grub2 · Debian 12.15 (bookworm) 2.06-13+deb12u1 DSA-5519-1 Oct 6, 2023
grub2 · Debian 13.5 (trixie) 2.12~rc1-11 DEBIAN-CVE-2023-4692 Oct 25, 2023
grub2 · Debian 14 2.12~rc1-11 DEBIAN-CVE-2023-4692 Oct 25, 2023
grub2 · rocky 8 1:2.02-156.el8.rocky.0.1 RLSA-2024:3184 Jun 14, 2024
grub2-common · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-common · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-common · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-common · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-common · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-common · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-common · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-debuginfo · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-debugsource · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-aa64 · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-aa64 · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-efi-aa64 · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-aa64 · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-efi-aa64 · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-aa64 · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-aa64 · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-efi-aa64-cdboot · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-aa64-cdboot · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-efi-aa64-cdboot · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-aa64-cdboot · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-efi-aa64-cdboot · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-aa64-cdboot · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-aa64-cdboot · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-efi-aa64-ec2 · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-aa64-modules · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-aa64-modules · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-efi-aa64-modules · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-aa64-modules · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-efi-aa64-modules · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-aa64-modules · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-aa64-modules · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-efi-ia32 · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-ia32 · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-ia32 · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-ia32-cdboot · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-ia32-cdboot · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-ia32-cdboot · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-ia32-modules · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-ia32-modules · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-ia32-modules · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-x64 · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-x64 · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-efi-x64 · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-x64 · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-efi-x64 · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-x64 · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-x64 · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-efi-x64-cdboot · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-x64-cdboot · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-efi-x64-cdboot · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-x64-cdboot · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-efi-x64-cdboot · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-x64-cdboot · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-x64-cdboot · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-efi-x64-ec2 · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-x64-modules · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-efi-x64-modules · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-efi-x64-modules · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-efi-x64-modules · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-efi-x64-modules · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-efi-x64-modules · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-efi-x64-modules · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-emu · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-emu-debuginfo · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-emu-modules · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-pc · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-pc · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-pc · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-pc · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-pc · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-pc · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-pc · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-pc-modules · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-pc-modules · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-pc-modules · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-pc-modules · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-pc-modules · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-pc-modules · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-pc-modules · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-ppc64le · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-ppc64le · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-ppc64le · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-ppc64le · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-ppc64le-modules · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-ppc64le-modules · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-ppc64le-modules · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-ppc64le-modules · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-tools · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-tools · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-tools · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-tools · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-tools · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-tools · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-tools-debuginfo · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools-efi · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-tools-efi · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-tools-efi · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-tools-efi · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-tools-efi · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools-efi · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-tools-efi · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-tools-efi-debuginfo · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools-extra · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-tools-extra · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-tools-extra · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-tools-extra · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-tools-extra · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools-extra · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-tools-extra · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-tools-extra-debuginfo · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools-minimal · RHEL 8 1:2.02-156.el8 RHSA-2024:3184 May 22, 2024
grub2-tools-minimal · RHEL 9 1:2.06-77.el9 RHSA-2024:2456 Apr 30, 2024
grub2-tools-minimal · almalinux 8 1:2.02-156.el8.alma.1 ALSA-2024:3184 May 22, 2024
grub2-tools-minimal · almalinux 9 1:2.06-77.el9.alma.1 ALSA-2024:2456 Apr 30, 2024
grub2-tools-minimal · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023
grub2-tools-minimal · ol 8 1:2.02-156.0.1.el8 ELSA-2024-3184 May 24, 2024
grub2-tools-minimal · ol 9 1:2.06-77.0.1.el9 ELSA-2024-2456 May 3, 2024
grub2-tools-minimal-debuginfo · amzn 2023 1:2.06-61.amzn2023.0.8 ALAS2023-2023-409 Oct 30, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.