According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or     blocks.(CVE-2024-1048)

Tenable has extracted the preceding description block directly from the EulerOS grub2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_3184 advisory.

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)

    * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)

    * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the grub2 package has been released.

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or     blocks.(CVE-2024-1048)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization grub2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.
    (CVE-2024-1048)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1742805183 advisory.

  - A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.
    (CVE-2024-1048)

  - A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly     check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of     overwriting sensitive information to bypass secure boot protections is not discarded. (CVE-2024-45774)

  - A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to     allocate memory for the grub's argument list. However, it fails to check in case the memory allocation     fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading     grub to crash or, in some rare scenarios, corrupt the IVT data. (CVE-2024-45775)

  - When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when     allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow,     leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite     critical data, possibly circumventing secure boot protections. (CVE-2024-45776)

  - A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in     grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be     leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention     of secure boot protections. (CVE-2024-45777)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2456 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)

    * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)

    * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0211 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-4692:
    An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass may be achieved.

    CVE-2023-4693:
    An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically     present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations.
    A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting     a high Confidentiality risk.

    CVE-2024-1048:
    A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0603 advisory.

    This advisory aggregates security fixes for the grub2 SRPM in CIQ FIPS 8.10 Compliant. It addresses 3     CVEs: CVE-2024-1048, CVE-2023-4693, CVE-2023-4692.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
202950	EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2024-2033)	Nessus	Huawei Local Security Checks	2024/7/22	2024/7/22	low
356902	Rocky Linux 8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc Multiple Vulnerabilities (crlsa-2024_3184)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
333639	Photon OS 5.0: Grub2 PHSA-2024-5.0-91-0241	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	low
202535	EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2024-1935)	Nessus	Huawei Local Security Checks	2024/7/16	2024/7/16	low
207636	EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2024-2471)	Nessus	Huawei Local Security Checks	2024/9/24	2024/9/24	low
198088	EulerOS Virtualization 2.11.0 : grub2 (EulerOS-SA-2024-1726)	Nessus	Huawei Local Security Checks	2024/5/29	2024/5/29	low
195265	EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2024-1591)	Nessus	Huawei Local Security Checks	2024/5/9	2024/5/9	low
360987	AlmaLinux 9.2 [TuxCare] Security Update: grub2-common / grub2-efi-aa64-modules / grub2-efi-x64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1742805183)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
194779	RHEL 9 : grub2 (RHSA-2024:2456)	Nessus	Red Hat Local Security Checks	2024/4/30	2024/11/7	high
236159	Alibaba Cloud Linux 3 : 0211: grub2 (ALINUX3-SA-2024:0211)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
261147	Photon OS 4.0: Grub2 PHSA-2025-4.0-0861	Nessus	PhotonOS Local Security Checks	2025/9/3	2026/11/2	high
354662	Rocky Linux 8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-ia32 / etc Multiple Vulnerabilities (ciqsa-2026_0603)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

偵測

搜尋 Plugin

low

high

low

low

low

low

low

high

high

high

high

high