CVE-2023-4001
Summary
| CVE | CVE-2023-4001 |
|---|---|
| State | RESERVED |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-01-15 11:15:00 UTC |
| Updated | 2024-02-05 04:15:00 UTC |
| Description | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. |
Risk And Classification
Problem Types: CWE-290
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fedoraproject | Fedora | 38 | All | All | All |
| Operating System | Fedoraproject | Fedora | 39 | All | All | All |
| Application | Gnu | Grub2 | - | All | All | All |
| Operating System | Redhat | Enterprise Linux | 9.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| cve-details | access.redhat.com | Third Party Advisory | |
| lists.fedoraproject.org/archives/list/[email protected]/messag... | lists.fedoraproject.org | ||
| Red Hat | access.redhat.com | ||
| Red Hat | access.redhat.com | ||
| lists.fedoraproject.org/archives/list/[email protected]/messag... | lists.fedoraproject.org | ||
| Red Hat | access.redhat.com | ||
| oss-security - CVE-2023-4001: a password bypass vulnerability in the downstream GRUB boot manager | www.openwall.com | Mailing List | |
| 2224951 – (CVE-2023-4001) CVE-2023-4001 grub2: bypass the GRUB password protection feature | bugzilla.redhat.com | Issue Tracking, Vendor Advisory | |
| CVE-2023-4001: a vulnerability in the (downstream) GRUB boot manager – My DFIR Blog | dfir.ru | Third Party Advisory | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161319 Oracle Enterprise Linux Security Update for grub2 (ELSA-2024-0468)
- 242755 Red Hat Update for grub2 (RHSA-2024:0437)
- 242836 Red Hat Update for grub2 (RHSA-2024:0468)
- 242840 Red Hat Update for grub2 (RHSA-2024:0456)
- 284899 Fedora Security Update for grub2 (FEDORA-2024-633dc7e183)
- 285028 Fedora Security Update for grub2 (FEDORA-2024-53d986312e)
- 357298 Amazon Linux Security Advisory for grub2 : ALAS2023-2024-555
- 941556 AlmaLinux Security Update for grub2 (ALSA-2024:0468)