The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs     because the bootloader mishandles string conversion when reading information from a USB device, allowing     an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured     USB device during the boot sequence to trigger this issue. A successful exploitation may lead GRUB to     crash, leading to a Denial of Service. Data corruption may be also possible, although given the complexity     of the exploit the impact is most likely limited. (CVE-2025-61661)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-61661

medium Nessus Plugin ID 275745

Version 1.2

Version 1.1

Version 1.2 Nov 20, 2025, 1:14 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2025-61661, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511200114
Version 1.1 Nov 19, 2025, 7:37 AM New Plugin Feed: 202511190737