The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0607-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : grub2 (SUSE-SU-2025:0607-1)

high Nessus Plugin ID 216650

Version 1.5

Version 1.1

Version 1.5 Aug 2, 2025, 1:37 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2025-0678" to "CVE-2025-1125") CVSSv2 severity (based on CVE-2025-1125, severity increased from "Medium" to "High") Plugin Feed: 202508020137
Version 1.1 Feb 22, 2025, 10:18 AM New Plugin Feed: 202502221018