CVE-2023-4949CWE-119CWE-190

Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation

High · published November 10, 2023

CVSS v3.1
8.1
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-190 · Integer Overflow or Wraparound
Published
2023-11-10T16:57Z
EPSS history
Timeline
  • 10 NOV 16:57Z
    Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation
    cvelistv5