RockyLinux 8 : grub2 (RLSA-2025:3367)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3367 advisory. grub2: net: Out-of-bounds write in grubnetsearchconfigfile CVE-2025-0624 Tenable has extracted the preceding description block directly from the RockyLinux securi...

CLSA-2025-1744213211 grub2: Fix of 5 CVEs

CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...

The vulnerability of the grub_net_search_config_file function in the Grub2 operating system allows a hacker to trigger a service failure.

The vulnerability of the grubnetsearchconfigfile function in the Grub operating system is related to writing beyond the boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...