Out-of-bounds read at fs/ntfs.c
CVE-2023-4693
5.3MEDIUM
Key Information:
- Vendor
Red Hat
- Vendor
- CVE Published:
- 25 October 2023
What is CVE-2023-4693?
An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.
Affected Version(s)
Red Hat Enterprise Linux 8 1:2.02-156.el8
Red Hat Enterprise Linux 9 1:2.06-77.el9