The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16154 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)

    * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)

    * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)

    * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks     (CVE-2025-0677)

    * grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled (CVE-2025-1118)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16154 advisory.

    * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)
      * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)
      * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)
      * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks     (CVE-2025-0677)
      * grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled (CVE-2025-1118)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the grub2 package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0588-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0586-1 advisory.

    - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
    - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
    - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
    - CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
    - CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
    - CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
    - CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
    - CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
    - CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
    - CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
    - CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
    - CVE-2024-49504: Fixed an issue that can bypass TPM-bound disk encryption on SL(E)M encrypted Images.
    (bsc#1229164)
    - CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
    - CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg .
    (bsc#1236317)
    - CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read     command.
      (bsc#1237012)
    - CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown     mode.
      (bsc#1237013)
    - CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in ufs.
      (bsc#1237002)
    - CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in reiserfs.
      (bsc#1237008)
    - CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in jfs.
      (bsc#1237009)
    - CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks     in romfs.
      (bsc#1237010)
    - CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution.
    (bsc#1237011)
    - CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
    - CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4.
    (bsc#1237006)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_6990 advisory.

    * grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774)

    * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775)

    * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)

    * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)

    * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783)

    * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)

    * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks     (CVE-2025-0677)

    * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1744628858 advisory.

  - A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly     check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of     overwriting sensitive information to bypass secure boot protections is not discarded. (CVE-2024-45774)

  - A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to     allocate memory for the grub's argument list. However, it fails to check in case the memory allocation     fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading     grub to crash or, in some rare scenarios, corrupt the IVT data. (CVE-2024-45775)

  - When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when     allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow,     leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite     critical data, possibly circumventing secure boot protections. (CVE-2024-45776)

  - A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to     validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds     write, causing data integrity issues and eventually allowing an attacker to circumvent secure boot     protections. (CVE-2024-45781)

  - A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS     filesystem driver performs a strcpy() using the user-provided volume name as input without properly     validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting     grub's sensitive data integrity and eventually leading to a secure boot protection bypass.
    (CVE-2024-45782)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
265398	RHEL 10 : grub2 (RHSA-2025:16154)	Nessus	Red Hat Local Security Checks	9/18/2025	9/18/2025	medium
269870	AlmaLinux 10 : grub2 (ALSA-2025:16154)	Nessus	Alma Linux Local Security Checks	10/9/2025	10/9/2025	medium
233411	Photon OS 5.0: Grub2 PHSA-2025-5.0-0481	Nessus	PhotonOS Local Security Checks	3/27/2025	10/14/2026	high
216508	SUSE SLES15: grub2 / grub2-arm64-efi / grub2-i386-pc / grub2-powerpc-ieee1275 / etc (SUSE-SU-2025:0588-1)	Nessus	SuSE Local Security Checks	2/20/2025	6/26/2026	high
216517	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grub2 (SUSE-SU-2025:0586-1)	Nessus	SuSE Local Security Checks	2/20/2025	8/14/2025	high
357176	Rocky Linux 9 [CIQ] Security Update: grub2-common / grub2-efi-aa64 / grub2-efi-aa64-cdboot / etc Multiple Vulnerabilities (crlsa-2025_6990)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	medium
261147	Photon OS 4.0: Grub2 PHSA-2025-4.0-0861	Nessus	PhotonOS Local Security Checks	9/3/2025	11/2/2026	high
360773	CentOS Linux 8.5 [TuxCare] Security Update: grub2-efi-ia32-cdboot / grub2-efi-ia32-modules / grub2-efi-x64 / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1744628858)	Nessus	CentOS Local Security Checks	10/1/2026	10/1/2026	high

Detections

Analytics

Plugins Search

medium

medium

high

high

high

medium

high

high