CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2023-4949
Medium (6.7). EPSS 0.2% chance of exploitation in the next 30 days.
An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-119, CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gnu:grub
- xen:xen