Detections
Analytics
EulerOS Virtualization 2.11.0 : grub2 (EulerOS-SA-2023-2095)
high Nessus Plugin ID 176842
Synopsis
The remote EulerOS Virtualization host is missing multiple security updates.Description
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :- A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.
This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released. (CVE-2021-3981)
- A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)
- When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded. (CVE-2022-3775)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected grub2 packages.See Also
Plugin Details
Severity: High
ID: 176842
File Name: EulerOS_SA-2023-2095.nasl
Version: 1.0
Type: local
Family: Huawei Local Security Checks
Published: 6/7/2023
Updated: 6/7/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: Low
Base Score: 2.1
Temporal Score: 1.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2021-3981
CVSS v3
Risk Factor: High
Base Score: 8.6
Temporal Score: 7.7
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2022-2601
Vulnerability Information
CPE: p-cpe:/a:huawei:euleros:grub2-common, p-cpe:/a:huawei:euleros:grub2-efi-x64, p-cpe:/a:huawei:euleros:grub2-efi-x64-modules, p-cpe:/a:huawei:euleros:grub2-pc, p-cpe:/a:huawei:euleros:grub2-pc-modules, p-cpe:/a:huawei:euleros:grub2-tools, p-cpe:/a:huawei:euleros:grub2-tools-efi, p-cpe:/a:huawei:euleros:grub2-tools-extra, p-cpe:/a:huawei:euleros:grub2-tools-minimal, cpe:/o:huawei:euleros:uvp:2.11.0
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/uvp_version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/6/2023
Vulnerability Publication Date: 7/30/2020