The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4692 advisory.

  - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue May allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack May also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass May be achieved. (CVE-2023-4692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5519 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-01f402fae5 advisory.

    Security fix for CVE-2023-4692

    Security fix for CVE-2023-4693

    Fri Mar 08 2024 Nicolas Frayer <nfrayer@redhat.com> - 2.06-118

    - fs/xfs: Handle non-continuous data blocks in directory extents
    - Related: #2254370

    Fri Mar 08 2024 Nicolas Frayer <nfrayer@redhat.com> - 2.06-117

    - GRUB2 NTFS driver vulnerabilities
    - (CVE-2023-4692)
    - (CVE-2023-4693)
    - Resolves: #2236613
    - Resolves: #2241978
    - Resolves: #2241976
    - Resolves: #2238343


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8737:05 advisory.

    * CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are     never written beyond the boundary
    * CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver     CVE(s):
    CVE-2023-4692     An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass may be achieved.
    CVE-2023-4693     An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically     present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations.
    A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting     a high Confidentiality risk.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass may be achieved. (CVE-2023-4692)

  - An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically     present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations.
    A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting     a high Confidentiality risk. (CVE-2023-4693)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0211 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-4692:
    An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker     to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some     circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code     execution and secure boot protection bypass may be achieved.

    CVE-2023-4693:
    An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically     present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations.
    A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting     a high Confidentiality risk.

    CVE-2024-1048:
    A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-     bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv     file. If the program is killed before the rename operation, the temporary file will not be removed and may     fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2b545d3085 advisory.

    Security fix for CVE-2023-4692

    Security fix for CVE-2023-4693

    Fri Apr 12 2024 Nicolas Frayer <nfrayer@redhat.com> - 2.06-121

    - fs/xfs: Handle non-continuous data blocks in directory extents
    - Related: #2254370

    Fri Mar 08 2024 Nicolas Frayer <nfrayer@redhat.com> - 2.06-120

    - GRUB2 NTFS driver vulnerabilities
    - (CVE-2023-4692)
    - (CVE-2023-4693)
    - Resolves: #2236613
    - Resolves: #2241978
    - Resolves: #2241976
    - Resolves: #2238343


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2456 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)

    * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)

    * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
201585	CBL Mariner 2.0 Security Update: grub2 (CVE-2023-4692)	Nessus	MarinerOS Local Security Checks	2024/7/3	2024/7/3	high
182750	Debian DSA-5519-1 : grub2 - security update	Nessus	Debian Local Security Checks	2023/10/7	2023/11/2	high
194941	Fedora 38 : grub2 (2024-01f402fae5)	Nessus	Fedora Local Security Checks	2024/5/2	2024/11/14	high
293029	MiracleLinux 7 : grub2-2.02-0.87.14.0.3.el7.AXS7 (AXSA:2024-8737:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
197286	EulerOS Virtualization 3.0.6.0 : grub2 (EulerOS-SA-2024-1683)	Nessus	Huawei Local Security Checks	2024/5/17	2024/5/17	high
188905	EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2024-1009)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
236159	Alibaba Cloud Linux 3 : 0211: grub2 (ALINUX3-SA-2024:0211)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
194692	Fedora 40 : grub2 (2024-2b545d3085)	Nessus	Fedora Local Security Checks	2024/4/29	2024/11/14	high
194779	RHEL 9 : grub2 (RHSA-2024:2456)	Nessus	Red Hat Local Security Checks	2024/4/30	2024/11/7	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high