{"id":"CLSA-2024-1721204317","summary":"grub2: Fix of 2 CVEs","details":"- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never\n  written beyond the boundary\n- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver","modified":"2026-05-27T11:18:22.827430454Z","published":"2024-07-17T08:20:41Z","upstream":["CVE-2023-4692","CVE-2023-4693"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1721204317.html"}],"affected":[{"package":{"name":"grub2","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-common","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-common?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-efi-ia32","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-efi-ia32?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-efi-ia32-cdboot","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-efi-ia32-cdboot?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-efi-ia32-modules","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-efi-ia32-modules?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-efi-x64","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-efi-x64?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-efi-x64-cdboot","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-efi-x64-cdboot?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-efi-x64-modules","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-efi-x64-modules?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-i386-modules","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-i386-modules?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-pc","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-pc?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-pc-modules","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-pc-modules?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-tools","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-tools?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-tools-extra","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-tools-extra?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}},{"package":{"name":"grub2-tools-minimal","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/grub2-tools-minimal?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.0.2.el7.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721204317.json"}}],"schema_version":"1.7.5"}