遠端 Ubuntu 20.04 LTS/22.04 LTS 主機上安裝的套件受到 USN-6355-1 公告中所提及的多個弱點影響。

  - shim 嘗試載入並執行特製的 EFI 可執行檔時，handle_image() 中可能出現溢位；
    handle_image() 函式會考慮每個區段中待載入的 SizeOfRawData 欄位。攻擊者可利用此弱點，對記憶體執行超出邊界寫入。在這種情況下，還可以觸發任意程式碼執行。(CVE-2022-28737)

  - 特製的 16 位元 PNG 灰階影像可能會導致堆積中發生超出邊界寫入，攻擊者可利用此弱點造成堆積資料損毀，或最終執行任意程式碼並規避安全開機保護。利用此問題的難度較大，因爲攻擊者需要對堆積配置執行某些分類以取得顯著結果，而且寫入記憶體的值要連續重複 3 次，因而難以產生有效的承載。此缺陷會影響 grub-2.12 之前的 grub2 版本。(CVE-2021-3695)

  - 在 PNG 讀取器中處理 Huffman 表格期間，可能會發生堆積超出邊界寫入，這可能導致堆積空間中的資料損毀。對於機密性、完整性和可用性的影響可被視為低危，因為攻擊者若要控制損毀的 Huffman 項目的編碼和位置，以達到任意程式碼執行和/或安全開機規避等效果，操作會非常複雜。此缺陷會影響 grub-2.12 之前的 grub2 版本。(CVE-2021-3696)

  - 特製的 JPEG 影像可能導致 JPEG 讀取器反向溢出其資料指標，進而允許在堆積中寫入使用者控制的資料。若要成功執行攻擊，攻擊者需要對堆積配置執行一些分類，並使用惡意格式和承載建構影像。此弱點可導致資料損毀，並最終導致程式碼執行或安全開機規避。此缺陷會影響 grub-2.12 之前的 grub2 版本。(CVE-2021-3697)

  - 在 grub2 中發現一個缺陷，其組態檔案 (稱為 grub.cfg) 是以錯誤的權限集建立，進而允許無權限的使用者讀取其內容。這將導致嚴重性較低的機密性問題，因為這些使用者最終可以讀取 grub.cfg 中存在的任何加密密碼。
    這個缺陷會影響 grub2 2.06 和之前版本。這個問題已在 grub 上游修正，但目前發布的任何版本都不包含此修正程式。(CVE-2021-3981)

  - grub_net_recv_ip4_packets 中的整數反向溢位問題；惡意的特製 IP 封包可導致 grub_net_recv_ip4_packets() 函式中 rsm->total_len 值出現整數反向溢位。在某些情況下，total_len 值最後可能迴繞為較小的整數，用於記憶體配置中。如果以這種方式攻擊成功，後續作業可能會在超出緩衝區結尾處寫入。(CVE-2022-28733)

  - 處理分割的 HTTP 標頭時發生超出邊界寫入；處理分割 HTTP 標頭時，GRUB2 HTTP 程式碼會意外地將其內部資料緩衝區點移動一個位置。這可導致在剖析 HTTP 要求時進一步超出邊界寫入，在緩衝區之外寫入一個 NULL 位元組。可以想像，由攻擊者控制的一組封包可導致 GRUB2 的內部記憶體中繼資料損毀。
    (CVE-2022-28734)

  - GRUB2 的 shim_lock 驗證器允許在 shim 驅動的安全開機系統上載入非核心檔案。
    允許載入此類檔案可能會導致在 GRUB2 中載入未經驗證的程式碼和模組，而中斷安全開機信任鏈結。(CVE-2022-28735)

  - grub_cmd_chainloader() 函式中有一個釋放後使用弱點； chainloader 命令用於啟動不支援多重開機且沒有來自 GRUB2 直接支援的作業系統。
    執行 chainloader 超過一次後，會觸發釋放後使用弱點。若攻擊者可控制 GRUB2 的記憶體配置模式，敏感資料就會遭到洩漏，並可能執行任意程式碼。(CVE-2022-28736)

  - 轉譯特定 unicode 序列時，grub2 的字型程式碼未正確驗證已知字符的寬度和高度是否限制在點陣圖大小以內。因此，攻擊者可建構輸入，在 grub2 堆積中造成超出邊界寫入，進而導致記憶體損毀和可用性問題。雖然複雜，但無法捨棄任意程式碼執行。(CVE-2022-3775)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

因此，會受到 ALAS2022-2022-109 公告中所提及的多個弱點影響。

  - 特製的 16 位元 PNG 灰階影像可能會導致堆積中發生超出邊界寫入，攻擊者可利用此弱點造成堆積資料損毀，或最終執行任意程式碼並規避安全開機保護。利用此問題的難度較大，因爲攻擊者需要對堆積配置執行某些分類以取得顯著結果，而且寫入記憶體的值要連續重複 3 次，因而難以產生有效的承載。此缺陷會影響 grub-2.12 之前的 grub2 版本。(CVE-2021-3695)

  - 在 PNG 讀取器中處理 Huffman 表格期間，可能會發生堆積超出邊界寫入，這可能導致堆積空間中的資料損毀。對於機密性、完整性和可用性的影響可被視為低危，因為攻擊者若要控制損毀的 Huffman 項目的編碼和位置，以達到任意程式碼執行和/或安全開機規避等效果，操作會非常複雜。此缺陷會影響 grub-2.12 之前的 grub2 版本。(CVE-2021-3696)

  - 特製的 JPEG 影像可能導致 JPEG 讀取器反向溢出其資料指標，進而允許在堆積中寫入使用者控制的資料。若要成功執行攻擊，攻擊者需要對堆積配置執行一些分類，並使用惡意格式和承載建構影像。此弱點可導致資料損毀，並最終導致程式碼執行或安全開機規避。此缺陷會影響 grub-2.12 之前的 grub2 版本。(CVE-2021-3697)

  - grub2：grub_net_recv_ip4_packets 中發生整數反向溢位 (CVE-2022-28733)

  - grub2：處理分割 HTTP 標頭時發生超出邊界寫入 (CVE-2022-28734)

  - grub2：shim_lock 驗證程式支持載入非核心檔案 (CVE-2022-28735)

  - grub2：grub_cmd_chainloader() 中發生釋放後使用 (CVE-2022-28736)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3981 advisory.

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:2110 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:2110 advisory.

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has grub2 packages installed that are affected by multiple vulnerabilities:

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    (CVE-2021-3981)

  - A flaw was found in grub2 when handling IPv4 packets. This flaw allows an attacker to craft a malicious     packet, triggering an integer underflow in grub code. Consequently, the memory allocation for handling the     packet data may be smaller than the size needed. This issue causes an out-of-bands write during packet     handling, compromising data integrity, confidentiality issues, a denial of service, and remote code     execution. (CVE-2022-28733)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0134 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-3695:
    A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may     take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent     secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform     some triage over the heap layout to achieve signifcant results, also the values written into the memory     are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2     versions prior grub-2.12.

    CVE-2021-3696:
    A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may     lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be     considered Low as it's very complex to an attacker control the encoding and positioning of corrupted     Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This     flaw affects grub2 versions prior grub-2.12.

    CVE-2021-3697:
    A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data     to be written in heap. To a successful to be performed the attacker needs to perform some triage over the     heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data     corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions     prior grub-2.12.

    CVE-2022-28733:
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

    CVE-2022-28734:
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

    CVE-2022-28735:
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

    CVE-2022-28736:
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

    CVE-2021-3981:
    A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released.

    CVE-2022-28737:
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-020 advisory.

    A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write.
    This flaw allows an attacker to corrupt the data on the heap portion of the grub2's memory, leading to     possible code execution and the circumvention of the secure boot mechanism. (CVE-2021-3695)

    A flaw was found in grub2 when handling a PNG image header. When decoding the data contained in the     Huffman table at the PNG file header, an out-of-bounds write may happen on grub's heap. (CVE-2021-3696)

    A flaw was found in grub2 when handling JPEG images. This flaw allows an attacker to craft a malicious     JPEG image, which leads to an underflow on a grub2's internal pointer, leading to a heap-based out-of-     bounds write. Secure-boot mechanisms circumvention and arbitrary code execution may also be achievable.
    (CVE-2021-3697)

    A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    (CVE-2021-3981)

    A flaw was found where a maliciously crafted pf2 font could lead to an out-of-bounds write in grub2. A     successful attack can lead to memory corruption and secure boot circumvention. (CVE-2022-2601)

    A flaw was found in grub2 when handling IPv4 packets. This flaw allows an attacker to craft a malicious     packet, triggering an integer underflow in grub code. Consequently, the memory allocation for handling the     packet data may be smaller than the size needed. This issue causes an out-of-bands write during packet     handling, compromising data integrity, confidentiality issues, a denial of service, and remote code     execution. (CVE-2022-28733)

    A flaw was found in grub2 when handling split HTTP headers. While processing a split HTTP header, grub2     wrongly advances its control pointer to the internal buffer by one position, which can lead to an out-of-     bounds write. This flaw allows an attacker to leverage this issue by crafting a malicious set of HTTP     packages making grub2 corrupt its internal memory metadata structure. This leads to data integrity and     confidentiality issues or forces grub to crash, resulting in a denial of service attack. (CVE-2022-28734)

    A flaw was found in grub2. The shim_lock verifier from grub2 allows non-kernel files to be loaded when     secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should     not be allowed. (CVE-2022-28735)

    A use-after-free vulnerability was found on grub2's chainloader command. This flaw allows an attacker to     gain access to restricted data or cause arbitrary code execution if they can establish control from grub's     memory allocation pattern. (CVE-2022-28736)

    A flaw was found in the grub2 font code. When rendering certain unicode sequences, it fails to properly     validate the font width and height. These values are further used to access the font buffer, causing     possible out-of-bounds writes. A malicious actor may craft a font capable of triggering this issue,     allowing modifications in unauthorized memory segments, causing data integrity problems or leading to     denial of service. (CVE-2022-3775)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-043 advisory.

    A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    (CVE-2021-3981)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2110 advisory.

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may     take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent     secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform     some triage over the heap layout to achieve signifcant results, also the values written into the memory     are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2     versions prior grub-2.12. (CVE-2021-3695)

  - A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may     lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be     considered Low as it's very complex to an attacker control the encoding and positioning of corrupted     Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This     flaw affects grub2 versions prior grub-2.12. (CVE-2021-3696)

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

  - grub2: Out-of-bound write when handling split HTTP headers (CVE-2022-28734)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may     take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent     secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform     some triage over the heap layout to achieve signifcant results, also the values written into the memory     are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2     versions prior grub-2.12. (CVE-2021-3695)

  - A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may     lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be     considered Low as it's very complex to an attacker control the encoding and positioning of corrupted     Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This     flaw affects grub2 versions prior grub-2.12. (CVE-2021-3696)

  - A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data     to be written in heap. To a successful to be performed the attacker needs to perform some triage over the     heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data     corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions     prior grub-2.12. (CVE-2021-3697)

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

  - grub2: Integer underflow in grub_net_recv_ip4_packets (CVE-2022-28733)

  - grub2: Out-of-bound write when handling split HTTP headers (CVE-2022-28734)

  - grub2: use-after-free in grub_cmd_chainloader() (CVE-2022-28736)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may     take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent     secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform     some triage over the heap layout to achieve signifcant results, also the values written into the memory     are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2     versions prior grub-2.12. (CVE-2021-3695)

  - A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may     lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be     considered Low as it's very complex to an attacker control the encoding and positioning of corrupted     Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This     flaw affects grub2 versions prior grub-2.12. (CVE-2021-3696)

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

  - grub2: Out-of-bound write when handling split HTTP headers (CVE-2022-28734)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
181178	Ubuntu 20.04 LTS / 22.04 LTS：GRUB2 弱點 (USN-6355-1)	Nessus	Ubuntu Local Security Checks	2023/9/8	2024/8/27	high
164779	Amazon Linux 2022: (ALAS2022-2022-109)	Nessus	Amazon Linux Local Security Checks	2022/9/7	2024/12/11	high
201768	CBL Mariner 2.0 Security Update: grub2 (CVE-2021-3981)	Nessus	MarinerOS Local Security Checks	2024/7/3	2024/7/3	low
161037	RHEL 8 : grub2 (RHSA-2022:2110)	Nessus	Red Hat Local Security Checks	2022/5/11	2024/11/7	low
162867	EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2022-1967)	Nessus	Huawei Local Security Checks	2022/7/8	2022/7/8	low
161091	AlmaLinux 8 : grub2 (ALSA-2022:2110)	Nessus	Alma Linux Local Security Checks	2022/5/12	2022/5/12	low
206830	NewStart CGSL MAIN 6.02 : grub2 Multiple Vulnerabilities (NS-SA-2024-0068)	Nessus	NewStart CGSL Local Security Checks	2024/9/10	2024/9/10	high
236599	Alibaba Cloud Linux 3 : 0134: grub2, mokutil, shim, and shim-unsigned-x64 (ALINUX3-SA-2022:0134)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
173192	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2023-020)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	high
162154	EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2022-1828)	Nessus	Huawei Local Security Checks	2022/6/13	2022/6/13	low
164737	Amazon Linux 2022 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2022-2022-043)	Nessus	Amazon Linux Local Security Checks	2022/9/6	2024/12/11	low
169564	EulerOS 2.0 SP11 : grub2 (EulerOS-SA-2023-1011)	Nessus	Huawei Local Security Checks	2023/1/5	2023/1/5	low
161348	Rocky Linux 8 : grub2 (RLSA-2022:2110)	Nessus	Rocky Linux Local Security Checks	2022/5/18	2023/11/6	low
164171	EulerOS 2.0 SP5 : grub2 (EulerOS-SA-2022-2268)	Nessus	Huawei Local Security Checks	2022/8/17	2024/1/18	high
165383	EulerOS Virtualization 2.9.1 : grub2 (EulerOS-SA-2022-2345)	Nessus	Huawei Local Security Checks	2022/9/23	2024/1/18	high
165895	EulerOS Virtualization 3.0.6.6 : grub2 (EulerOS-SA-2022-2504)	Nessus	Huawei Local Security Checks	2022/10/9	2024/1/18	high

检测

插件搜索

high

high

low

low

low

low

high

high

high

low

low

low

low

high

high

high