Free Software Foundation vulnerabilities

Products

• Grub-Legacy 1

Latest Free Software Foundation CVEs

Newest publication first

1. CVE-2023-4949 Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation

   Published 2023-11-10

   Medium·CVSS 6.7 EPSS 0.26%

   An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.