The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2790 advisory.

    The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot     loader under secure boot environments.

    The fwupd packages provide a service that allows session software to update device firmware.

    The following packages have been upgraded to a later upstream version: shim (15.4). (BZ#1932411)

    Security Fix(es):

    * grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled     (CVE-2020-14372)

    * grub2: Use-after-free in rmmod command (CVE-2020-25632)

    * grub2: Out-of-bounds write in grub_usb_device_initialize() (CVE-2020-25647)

    * grub2: Stack buffer overflow in grub_parser_split_cmdline() (CVE-2020-27749)

    * grub2: cutmem command allows privileged user to remove memory regions when Secure Boot is enabled     (CVE-2020-27779)

    * grub2: Heap out-of-bounds write in short form option parser (CVE-2021-20225)

    * grub2: Heap out-of-bounds write due to miscalculation of space required for quoting (CVE-2021-20233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the grub2 package has been released.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0426 advisory.

    This advisory aggregates security fixes for the grub2 SRPM in CIQ LTS 9.2. It addresses 45 CVEs:
    CVE-2021-3981, CVE-2021-20233, CVE-2022-28734, CVE-2023-4693, CVE-2020-25632, and 40 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
151844	RHEL 8 : shim and fwupd (RHSA-2021:2790)	Nessus	Red Hat Local Security Checks	2021/7/21	2024/11/7	high
148339	Photon OS 2.0: Grub2 PHSA-2021-2.0-0334	Nessus	PhotonOS Local Security Checks	2021/4/7	2024/7/22	high
356048	Rocky Linux 9.2 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-aa64 / etc Multiple Vulnerabilities (ciqsa-2026_0426)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

検出

プラグインの検索

high

high

high