According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong     permission set allowing non privileged users to read its content. This represents a low severity     confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
    This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no     version with the fix is currently released. (CVE-2021-3981)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

EulerOS 2.0 SP11 : grub2 (EulerOS-SA-2023-1011)

low Nessus Plugin ID 169564

Version 1.0