Local Privilege Escalation via Modified XFS Partition in Grub-Legacy

CVE-2023-4949 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

Learn more about our External Network Penetration Testing.