The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8135:03 advisory.

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)
      * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)
      * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8448:04 advisory.

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)
      * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)
      * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3184 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)

    * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)

    * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.8.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.5 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header     special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user.
    However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP     redirects to a different origin if that user doesn't disable redirects explicitly. This issue has been     patched in urllib3 version 1.26.17 or 2.0.5. (CVE-2023-43804)

  - Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache     Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers     correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect     infinite timeout which allowed connections to remain open which should have been closed. This issue     affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1     through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be     affected: 8.5.0 though 8.5.100. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90,     which fixes the issue. (CVE-2024-34750)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In     affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol,     but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated,     thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an     exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
    (CVE-2023-23931)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass may be achieved. (CVE-2023-4692)

  - An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically     present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations.
    A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting     a high Confidentiality risk. (CVE-2023-4693)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0211 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-4692:
    An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass may be achieved.

    CVE-2023-4693:
    An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically     present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations.
    A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting     a high Confidentiality risk.

    CVE-2024-1048:
    A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2b545d3085 advisory.

    Security fix for CVE-2023-4692

    Security fix for CVE-2023-4693

    Fri Apr 12 2024 Nicolas Frayer <nfrayer@redhat.com> - 2.06-121

    - fs/xfs: Handle non-continuous data blocks in directory extents
    - Related: #2254370

    Fri Mar 08 2024 Nicolas Frayer <nfrayer@redhat.com> - 2.06-120

    - GRUB2 NTFS driver vulnerabilities
    - (CVE-2023-4692)
    - (CVE-2023-4693)
    - Resolves: #2236613
    - Resolves: #2241978
    - Resolves: #2241976
    - Resolves: #2238343


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2456 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)

    * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)

    * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
292391	MiracleLinux 9 : grub2-2.06-77.el9.ML.1 (AXSA:2024-8135:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
292887	MiracleLinux 8 : grub2-2.02-156.el8.ML.1 (AXSA:2024-8448:04)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
197787	RHEL 8 : grub2 (RHSA-2024:3184)	Nessus	Red Hat Local Security Checks	2024/5/23	2024/11/7	high
206720	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.5)	Nessus	Misc.	2024/9/6	2025/9/1	high
197286	EulerOS Virtualization 3.0.6.0 : grub2 (EulerOS-SA-2024-1683)	Nessus	Huawei Local Security Checks	2024/5/17	2024/5/17	high
188905	EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2024-1009)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
236159	Alibaba Cloud Linux 3 : 0211: grub2 (ALINUX3-SA-2024:0211)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
194692	Fedora 40 : grub2 (2024-2b545d3085)	Nessus	Fedora Local Security Checks	2024/4/29	2024/11/14	high
194779	RHEL 9 : grub2 (RHSA-2024:2456)	Nessus	Red Hat Local Security Checks	2024/4/30	2024/11/7	high

检测

插件搜索

high

high

high

high

high

high

high

high

high