Red Hat Security Advisory

RHSA-2024:3184

grub2 security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) grub2-1:2.02-156.el8, grub2-common-1:2.02-156.el8, grub2-efi-aa64-1:2.02-156.el8 +16

TI-2023-04324 CVE-2023-4692 · GHSA-6w7h-fpm5-3ww6

HIGH 69

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0054 Published 2023-10-25 Partial fix · 2.12, 1:2.02-156.el8 +1 CWE-122

TI-2023-04325 CVE-2023-4693 · GHSA-r62p-gp92-7444

LOW 25

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver.

CVSS 3.1MEDIUM 5.3 Local High privileges No interaction EPSS 0.00488 Published 2023-10-25 Partial fix · 1:2.02-156.el8, 1:2.06-77.el9 CWE-125

TI-2024-00969 CVE-2024-1048 · GHSA-3qrv-r8v8-pmw7

LOW 16

A flaw was found in the grub2-set-bootflag utility of grub2.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00269 Published 2024-02-06 Fixed in 1:2.02-156.el8, 1:2.06-77.el9 CWE-459