Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:grub:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGrub (c69a4b8c-27db-5e77-9e74-f43a4628746c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/grub2 purl2cpe 2026-06-01 10:11:55.679713
pkg:deb/ubuntu/grub2 purl2cpe 2026-06-01 10:11:55.679714
pkg:github/coreos/grub purl2cpe 2026-06-01 10:11:55.679716
pkg:github/loongarch64/grub purl2cpe 2026-06-01 10:11:55.679717
pkg:github/olafhering/grub purl2cpe 2026-06-01 10:11:55.679719
pkg:gitlab/kalilinux/grub2 purl2cpe 2026-06-01 10:11:55.679720
pkg:gnu/grub purl2cpe 2026-06-01 10:11:55.679721
pkg:rpm/fedora/grub2 purl2cpe 2026-06-01 10:11:55.679723
pkg:rpm/opensuse/grub2 purl2cpe 2026-06-01 10:11:55.679724

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4949 vulnerable 2026-06-08 06:16:15.151493 Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation
HIGH (8.1)
An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.
Published: 2023-11-10T16:57:03.311Z
Updated: 2024-09-03T17:29:10.425Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.