The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0468 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: bypass the GRUB password protection feature (CVE-2023-4001)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:0468 advisory.

  - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to     search for the configuration file that contains the password hash for the GRUB password protection     feature. An attacker capable of attaching an external drive such as a USB stick containing a file system     with a duplicate UUID (the same as in the /boot/ file system) can bypass the GRUB password protection     feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was     introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
    (CVE-2023-4001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0468 advisory.

  - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to     search for the configuration file that contains the password hash for the GRUB password protection     feature. An attacker capable of attaching an external drive such as a USB stick containing a file system     with a duplicate UUID (the same as in the /boot/ file system) can bypass the GRUB password protection     feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was     introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
    (CVE-2023-4001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-555 advisory.

  - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to     search for the configuration file that contains the password hash for the GRUB password protection     feature. An attacker capable of attaching an external drive such as a USB stick containing a file system     with a duplicate UUID (the same as in the /boot/ file system) can bypass the GRUB password protection     feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was     introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
    (CVE-2023-4001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0437 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: bypass the GRUB password protection feature (CVE-2023-4001)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-53d986312e advisory.

  - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to     search for the configuration file that contains the password hash for the GRUB password protection     feature. An attacker capable of attaching an external drive such as a USB stick containing a file system     with a duplicate UUID (the same as in the /boot/ file system) can bypass the GRUB password protection     feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was     introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
    (CVE-2023-4001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-633dc7e183 advisory.

  - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to     search for the configuration file that contains the password hash for the GRUB password protection     feature. An attacker capable of attaching an external drive such as a USB stick containing a file system     with a duplicate UUID (the same as in the /boot/ file system) can bypass the GRUB password protection     feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was     introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
    (CVE-2023-4001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0456 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: bypass the GRUB password protection feature (CVE-2023-4001)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
189559	RHEL 9 : grub2 (RHSA-2024:0468)	Nessus	Red Hat Local Security Checks	1/25/2024	6/3/2024	medium
189622	AlmaLinux 9 : grub2 (ALSA-2024:0468)	Nessus	Alma Linux Local Security Checks	1/26/2024	1/26/2024	medium
189754	Oracle Linux 9 : grub2 (ELSA-2024-0468)	Nessus	Oracle Linux Local Security Checks	1/30/2024	1/30/2024	medium
191608	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2024-555)	Nessus	Amazon Linux Local Security Checks	3/6/2024	3/6/2024	medium
189564	RHEL 9 : grub2 (RHSA-2024:0437)	Nessus	Red Hat Local Security Checks	1/25/2024	6/3/2024	medium
189984	Fedora 39 : grub2 (2024-53d986312e)	Nessus	Fedora Local Security Checks	2/5/2024	2/5/2024	medium
189986	Fedora 38 : grub2 (2024-633dc7e183)	Nessus	Fedora Local Security Checks	2/5/2024	2/5/2024	medium
189588	RHEL 9 : grub2 (RHSA-2024:0456)	Nessus	Red Hat Local Security Checks	1/25/2024	6/4/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium