SUSE-SU-2023:4141-1: Security update for grub2

Q: What conditions are needed to exploit the security issues?

The issues are in GRUB2's NTFS filesystem handling. Exploitation would require GRUB2 to process a crafted NTFS filesystem or data through its NTFS parser; the provided advisory does not specify a remote attack path or additional prerequisites.

Q: What could an attacker achieve if exploitation succeeds?

CVE-2023-4692 may allow unsigned code execution through an out-of-bounds write. CVE-2023-4693 may allow sensitive information disclosure through an out-of-bounds read.

Q: Which GRUB2 deployments should be reviewed for the update?

Review systems using the listed SUSE GRUB2 packages, including EFI variants for ARM64, i386 PC, s390x emulation, PowerPC IEEE1275, the snapper plugin, and associated debugging packages. The advisory does not state whether a default installation configuration is affected.

Published Oct 20, 2023

Updated

This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936) Other fixes: - Fix a boot delay issue in PowerPC PXE boot (bsc#1201300)

Affected Software

51 affected componentsFixes available

All of the following

SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

Any of the following

suse/grub2<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-debuginfo<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-branding-upstream<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE openSUSE Leap 15.5 (aarch64 s390x x86_64 i586)

suse/grub2-debugsource<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE openSUSE Leap 15.5 (noarch)

Any of the following

suse/grub2-s390x-emu-extras<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-powerpc-ieee1275-extras<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-arm64-efi-debug<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-xen-extras<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-powerpc-ieee1275<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-arm64-efi<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-efi-extras<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-snapper-plugin<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-pc-debug<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-efi<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-powerpc-ieee1275-debug<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-arm64-efi-extras<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-systemd-sleep-plugin<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-xen<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-efi-debug<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-pc-extras<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-pc<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE openSUSE Leap 15.5 (s390x)

Any of the following

suse/grub2-s390x-emu<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-s390x-emu-debug<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64)

Any of the following

suse/grub2<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-debuginfo<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-debugsource<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.5 (noarch)

Any of the following

suse/grub2-arm64-efi<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-pc<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-snapper-plugin<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE SUSE Linux Enterprise Micro 5.5 (s390x)

suse/grub2-s390x-emu<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/grub2<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-debuginfo<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE Basesystem Module 15-SP5 (noarch)

Any of the following

suse/grub2-powerpc-ieee1275<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-arm64-efi<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-i386-pc<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-snapper-plugin<2.06-150500.29.8.1

2.06-150500.29.8.1

suse/grub2-systemd-sleep-plugin<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 s390x x86_64)

suse/grub2-debugsource<2.06-150500.29.8.1

2.06-150500.29.8.1

All of the following

SUSE Basesystem Module 15-SP5 (s390x)

suse/grub2-s390x-emu<2.06-150500.29.8.1

2.06-150500.29.8.1

SUSE Server Applications Module 15-SP5 (noarch)

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/grub2 to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-debuginfo to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-branding-upstream to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-debugsource to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-s390x-emu-extras to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-powerpc-ieee1275-extras to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-arm64-efi-debug to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-xen-extras to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-powerpc-ieee1275 to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-arm64-efi to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-efi-extras to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-snapper-plugin to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-pc-debug to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-efi to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-powerpc-ieee1275-debug to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-arm64-efi-extras to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-systemd-sleep-plugin to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-xen to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-efi-debug to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-pc-extras to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-i386-pc to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-s390x-emu to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade suse/grub2-s390x-emu-debug to a version that resolves this vulnerability.
Fixed in 2.06-150500.29.8.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4141=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-4141=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2023-4141=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4141=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4141=1

Event History

Oct 20, 2023

Advisory Published

12:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What conditions are needed to exploit the security issues?

The issues are in GRUB2's NTFS filesystem handling. Exploitation would require GRUB2 to process a crafted NTFS filesystem or data through its NTFS parser; the provided advisory does not specify a remote attack path or additional prerequisites.

What could an attacker achieve if exploitation succeeds?

CVE-2023-4692 may allow unsigned code execution through an out-of-bounds write. CVE-2023-4693 may allow sensitive information disclosure through an out-of-bounds read.

Which GRUB2 deployments should be reviewed for the update?

Review systems using the listed SUSE GRUB2 packages, including EFI variants for ARM64, i386 PC, s390x emulation, PowerPC IEEE1275, the snapper plugin, and associated debugging packages. The advisory does not state whether a default installation configuration is affected.

SUSE-SU-2023:4141-1: Security update for grub2

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What conditions are needed to exploit the security issues?

What could an attacker achieve if exploitation succeeds?

Which GRUB2 deployments should be reviewed for the update?

Company

Resources

Contact

Frequently Asked Questions

What conditions are needed to exploit the security issues?

What could an attacker achieve if exploitation succeeds?

Which GRUB2 deployments should be reviewed for the update?