Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2022-9596
HistoryJul 14, 2022 - 12:00 a.m.

grub2 security update

2022-07-1400:00:00
linux.oracle.com
13

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

JSON

[2.06-27.0.6.el9_0.7]

  • Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
    [2.06-27.0.5.el9_0.7]
  • Replaced bugzilla.oracle.com references [Orabug: 34202300]
  • Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  • Various coverity fixes [JIRA: OLDIS-16371]
  • bump SBAT generation
  • Update bug url [Orabug: 34202300]
  • Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  • Update signing certificate [JIRA: OLDIS-16371]
  • fix SBAT data [JIRA: OLDIS-16371]
  • Update requires [JIRA: OLDIS-16371]
  • Rebuild for SecureBoot signatures [Orabug: 33801813]
  • Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  • Update Oracle SBAT data [Orabug: 32670033]
  • Use new signing certificate [Orabug: 32670033]
  • honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  • set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  • Update upstream references [Orabug: 26388226]
  • Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  • Put ‘with’ in menuentry instead of ‘using’ [Orabug: 18504756]
  • Use different titles for UEK and RHCK kernels [Orabug: 18504756]
    [2.06-27.el9_0.7]
  • CVE fixes for 2022-06-07
  • CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  • CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  • Resolves: #2089810
OSVersionArchitecturePackageVersionFilename
oracle linux9srcgrub2< 2.06-27.0.6.el9_0.7grub2-2.06-27.0.6.el9_0.7.src.rpm
oracle linux9noarchgrub2-common< 2.06-27.0.6.el9_0.7grub2-common-2.06-27.0.6.el9_0.7.noarch.rpm
oracle linux9aarch64grub2-efi-aa64< 2.06-27.0.6.el9_0.7grub2-efi-aa64-2.06-27.0.6.el9_0.7.aarch64.rpm
oracle linux9aarch64grub2-efi-aa64-cdboot< 2.06-27.0.6.el9_0.7grub2-efi-aa64-cdboot-2.06-27.0.6.el9_0.7.aarch64.rpm
oracle linux9noarchgrub2-efi-aa64-modules< 2.06-27.0.6.el9_0.7grub2-efi-aa64-modules-2.06-27.0.6.el9_0.7.noarch.rpm
oracle linux9noarchgrub2-efi-x64-modules< 2.06-27.0.6.el9_0.7grub2-efi-x64-modules-2.06-27.0.6.el9_0.7.noarch.rpm
oracle linux9aarch64grub2-tools< 2.06-27.0.6.el9_0.7grub2-tools-2.06-27.0.6.el9_0.7.aarch64.rpm
oracle linux9aarch64grub2-tools-extra< 2.06-27.0.6.el9_0.7grub2-tools-extra-2.06-27.0.6.el9_0.7.aarch64.rpm
oracle linux9aarch64grub2-tools-minimal< 2.06-27.0.6.el9_0.7grub2-tools-minimal-2.06-27.0.6.el9_0.7.aarch64.rpm
oracle linux9srcgrub2< 2.06-27.0.6.el9_0.7grub2-2.06-27.0.6.el9_0.7.src.rpm
Rows per page:
1-10 of 211

Related

nessus 65
redhat 7
almalinux 2
osv 6
oraclelinux 7
rocky 2
suse 2
openvas 50
fedora 5
redos 2
gentoo 1
ubuntu 1
amazon 1
rosalinux 4
ibm 1
veracode 4
cve 5
debiancve 5
prion 5
redhatcve 5
photon 2
ubuntucve 6
cbl_mariner 9
f5 2
nessus
nessus
RHEL 8 : grub2, mokutil, and shim (RHSA-2022:5098)
2022-06-16 00:00:00
Rocky Linux 8 : grub2, mokutil, shim, and shim-unsigned-x64 (RLSA-2022:5095)
2022-07-08 00:00:00
Oracle Linux 9 : grub2 (ELSA-2022-9596)
2022-07-14 00:00:00
redhat
redhat
(RHSA-2022:5099) Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:17:13
(RHSA-2022:5095) Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:10:10
(RHSA-2022:5100) Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:17:35
almalinux
almalinux
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
osv
osv
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:17:13
oraclelinux
oraclelinux
grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-07-04 00:00:00
grub2 security update
2022-07-14 00:00:00
grub2 security update
2022-06-07 00:00:00
rocky
rocky
grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:10:10
grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:17:13
suse
suse
Security update for grub2 (important)
2022-06-13 00:00:00
Security update for grub2 (important)
2022-06-10 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2035-1)
2022-06-13 00:00:00
openSUSE: Security Advisory for grub2 (SUSE-SU-2022:2035-1)
2022-06-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2064-1)
2022-06-14 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: grub2-2.06-11.fc35
2022-06-22 01:25:16
[SECURITY] Fedora 36 Update: grub2-2.06-42.fc36
2022-06-10 01:15:49
[SECURITY] Fedora 35 Update: shim-15.6-1
2022-06-17 01:20:06
redos
redos
ROS-20240208-03
2024-02-08 00:00:00
ROS-20240208-02
2024-02-08 00:00:00
gentoo
gentoo
GRUB: Multiple Vulnerabilities
2022-09-25 00:00:00
ubuntu
ubuntu
GRUB2 vulnerabilities
2023-09-08 00:00:00
amazon
amazon
Important: grub2
2023-07-17 17:40:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2341
2024-02-14 10:25:29
Advisory ROSA-SA-2023-2300
2023-12-05 10:31:19
Advisory ROSA-SA-2023-2112
2023-02-14 11:48:50
ibm
ibm
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component
2022-12-20 20:15:41
veracode
veracode
Denial Of Service (DoS)
2022-06-16 04:50:15
Out-of-bound Writes
2022-06-24 08:44:02
Remote Code Execution (RCE)
2022-06-16 04:47:55
cve
cve
CVE-2022-28734
2023-07-20 01:15:00
CVE-2022-28737
2023-07-20 01:15:00
CVE-2022-28735
2023-07-20 01:15:00
debiancve
debiancve
CVE-2022-28735
2023-07-20 01:15:00
CVE-2022-28733
2023-07-20 01:15:00
CVE-2022-28737
2023-07-20 01:15:00
prion
prion
Code injection
2023-07-20 01:15:00
Integer overflow
2023-07-20 01:15:00
Design/Logic Flaw
2023-07-20 01:15:00
redhatcve
redhatcve
CVE-2022-28733
2022-06-07 17:19:51
CVE-2022-28735
2022-06-07 17:19:55
CVE-2022-28737
2022-06-07 17:19:58
photon
photon
Important Photon OS Security Update - PHSA-2023-0510
2023-01-03 00:00:00
Important Photon OS Security Update - PHSA-2023-0306
2023-01-03 00:00:00
ubuntucve
ubuntucve
CVE-2022-28737
2023-07-20 00:00:00
CVE-2022-28735
2023-07-20 00:00:00
CVE-2022-28736
2023-07-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-28735 affecting package grub2 2.06-11
2023-11-08 02:07:28
CVE-2022-28735 affecting package grub2 2.06-18
2024-03-19 17:21:46
CVE-2022-28736 affecting package grub2 2.06-11
2023-11-08 02:07:28
f5
f5
K000130541 : Grub2 vulnerability CVE-2022-28734
2023-01-11 00:00:00
K000132893 : GRUB2 vulnerability CVE-2022-28733
2023-03-08 00:00:00

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

JSON
Related for ELSA-2022-9596
nessus65redhat7almalinux2osv6oraclelinux7rocky2suse2openvas50fedora5redos2gentoo1ubuntu1amazon1rosalinux4ibm1veracode4cve5debiancve5prion5redhatcve5photon2ubuntucve6cbl_mariner9f52