Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:4141-1

Опубликовано: 20 окт. 2023
Источник: suse-cvrf

Описание

Security update for grub2

This update for grub2 fixes the following issues:

Security fixes:

  • CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)
  • CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)

Other fixes:

  • Fix a boot delay issue in PowerPC PXE boot (bsc#1201300)

Список пакетов

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Container suse/sle-micro/base-5.5:latest
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Azure-3P
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Azure-Basic
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Azure-Standard
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-CHOST-BYOS-Aliyun
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
Image SLES15-SP5-CHOST-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-CHOST-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-CHOST-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-CHOST-BYOS-GDC
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-CHOST-BYOS-SAP-CCloud
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-HPC-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-HPC-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-HPC-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-HPC-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Hardened-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Hardened-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Hardened-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-EC2-llc
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Manager-Server-5-0-EC2-ltd
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-BYOS
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-Micro-5-5-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Azure-3P
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-SAP-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Hardened-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAP-Hardened-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAPCAL-Azure
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
Image SLES15-SP5-SAPCAL-EC2
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
Image SLES15-SP5-SAPCAL-GCE
grub2-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
SUSE Linux Enterprise Micro 5.5
grub2-2.06-150500.29.8.1
grub2-arm64-efi-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-s390x-emu-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
grub2-x86_64-xen-2.06-150500.29.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
grub2-2.06-150500.29.8.1
grub2-arm64-efi-2.06-150500.29.8.1
grub2-i386-pc-2.06-150500.29.8.1
grub2-powerpc-ieee1275-2.06-150500.29.8.1
grub2-s390x-emu-2.06-150500.29.8.1
grub2-snapper-plugin-2.06-150500.29.8.1
grub2-systemd-sleep-plugin-2.06-150500.29.8.1
grub2-x86_64-efi-2.06-150500.29.8.1
SUSE Linux Enterprise Module for Server Applications 15 SP5
grub2-x86_64-xen-2.06-150500.29.8.1

Ссылки

Описание

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.

Затронутые продукты
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:grub2-2.06-150500.29.8.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:grub2-i386-pc-2.06-150500.29.8.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:grub2-x86_64-efi-2.06-150500.29.8.1
Container suse/sle-micro/base-5.5:latest:grub2-2.06-150500.29.8.1
Ссылки

Описание

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.

Затронутые продукты
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:grub2-2.06-150500.29.8.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:grub2-i386-pc-2.06-150500.29.8.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:grub2-x86_64-efi-2.06-150500.29.8.1
Container suse/sle-micro/base-5.5:latest:grub2-2.06-150500.29.8.1
Ссылки
Уязвимость SUSE-SU-2023:4141-1