MiracleLinux 8 : shim-unsigned-x64-15.4-4.el8.ML.2 (AXSA:2021-2174:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2174:02 advisory. grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 grub2: Use-after-free in rmmod...

MiracleLinux 9 : grub2-2.06-46.el9.3.ML.1 (AXSA:2023-5114:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5114:03 advisory. grub2: Buffer overflow in grubfontconstructglyph can lead to out-of-bound write and possible secure boot bypass CVE-2022-2601 grub2: Heap based...

MiracleLinux 8 : fwupd-1.5.9-1.el8.ML.1 (AXSA:2022-2904:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-2904:01 advisory. grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 grub2: Use-after-free in rmmod...

Important Photon OS Security Update - PHSA-2026-5.0-0742

Updates of 'grub2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0742

Updates of 'grub2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-90-0742

Updates of 'grub2' packages of Photon OS have been released...

MiracleLinux 9 : grub2-2.06-114.el9_7.ML.1 (AXSA:2025-11476:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11476:11 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. CVE-2024-45777 Tenable has extracted the preceding description block directly from the...

CVE-2025-61663 affecting package grub2 for versions less than 2.06-26

CVE-2025-61663 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-61662 affecting package grub2 for versions less than 2.06-26

CVE-2025-61662 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2021-20233 affecting package grub2 for versions less than 2.06-26

CVE-2021-20233 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-61664 affecting package grub2 for versions less than 2.06-26

CVE-2025-61664 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

CVE-2020-10565

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

CVE-2020-10566

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-61663 affecting package grub2 for versions less than 2.06-16

CVE-2025-61663 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-16

CVE-2025-61661 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-61662 affecting package grub2 for versions less than 2.06-16

CVE-2025-61662 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

Amazon Linux 2 : grub2, --advisory ALAS2-2025-3107 (ALAS-2025-3107)

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3107 advisory. A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS...