https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 07:07:05 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:0468 <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: bypass the GRUB password protection feature (CVE-2023-4001)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: bypass the GRUB password protection feature (CVE-2023-4001)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:0468 https://cve.radiocsirt.org/vuln/bdu:2024-00324 bdu:2024-00324 https://cve.radiocsirt.org/vuln/bdu:2024-00324 https://cve.radiocsirt.org/vuln/bell-cve-2023-4001 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2023-4001 https://cve.radiocsirt.org/vuln/euvd-2026-261552 EUVD-2026-261552 https://cve.radiocsirt.org/vuln/euvd-2026-261552 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4001 <p>An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the &#34;/boot/&#34; file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat&#39;s version of grub2 and does not affect the upstream package.</p> <p>An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the &#34;/boot/&#34; file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat&#39;s version of grub2 and does not affect the upstream package.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4001 https://cve.radiocsirt.org/vuln/ghsa-rr4v-xrwq-7rhx <p>An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the &#34;/boot/&#34; file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat&#39;s version of grub2 and does not affect the upstream package.</p> <p>An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the &#34;/boot/&#34; file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat&#39;s version of grub2 and does not affect the upstream package.</p> https://cve.radiocsirt.org/vuln/ghsa-rr4v-xrwq-7rhx https://cve.radiocsirt.org/vuln/gsd-2023-4001 gsd-2023-4001 https://cve.radiocsirt.org/vuln/gsd-2023-4001 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4001 msrc_CVE-2023-4001 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4001 https://cve.radiocsirt.org/vuln/rhsa-2024:0437 <p>grub2: bypass the GRUB password protection feature</p> <p>grub2: bypass the GRUB password protection feature</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0437 https://cve.radiocsirt.org/vuln/rhsa-2024:0468 <p>grub2: bypass the GRUB password protection feature</p> <p>grub2: bypass the GRUB password protection feature</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0468 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4001 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2-signed</p> <p>An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the &#34;/boot/&#34; file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat&#39;s version of grub2 and does not affect the upstream package.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2-signed</p> <p>An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the &#34;/boot/&#34; file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat&#39;s version of grub2 and does not affect the upstream package.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4001 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0100 <p>Ein lokaler Angreifer kann eine Schwachstelle in Grub ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Grub ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0100