USN-6410-1

Dashboard / Vulnerabilities / USN-6410-1

USN-6410-1

Summary: grub2-signed, grub2-unsigned vulnerabilities

Details: It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. (CVE-2023-4692) It was discovered that a specially crafted file system image could cause an out-of-bounds read. A physically-present attacker could possibly use this to leak sensitive information to the GRUB pager. (CVE-2023-4693)

References: https://ubuntu.com/security/notices/USN-6410-1, https://ubuntu.com/security/CVE-2023-4692, https://ubuntu.com/security/CVE-2023-4693