Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2021-3981

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. (CVE-2021-3981)

Source

ALAS2022-2022-043

Amazon Linux 2022 Security Advisory: ALAS-2022-043
Advisory Release Date: 2022-04-18 23:22 Pacific
Advisory Updated Date: 2022-04-22 15:11 Pacific

Severity: Low

References: CVE-2021-3981

Issue Overview:

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. (CVE-2021-3981)

Affected Packages:

grub2

Issue Correction:
Run dnf update --releasever=2022.0.20220419 grub2 to update your system.

New Packages:

aarch64:
    grub2-efi-aa64-cdboot-2.06-22.amzn2022.0.1.aarch64
    grub2-emu-modules-2.06-22.amzn2022.0.1.aarch64
    grub2-tools-2.06-22.amzn2022.0.1.aarch64
    grub2-tools-extra-debuginfo-2.06-22.amzn2022.0.1.aarch64
    grub2-tools-debuginfo-2.06-22.amzn2022.0.1.aarch64
    grub2-tools-minimal-debuginfo-2.06-22.amzn2022.0.1.aarch64
    grub2-emu-debuginfo-2.06-22.amzn2022.0.1.aarch64
    grub2-tools-minimal-2.06-22.amzn2022.0.1.aarch64
    grub2-emu-2.06-22.amzn2022.0.1.aarch64
    grub2-efi-aa64-ec2-2.06-22.amzn2022.0.1.aarch64
    grub2-debuginfo-2.06-22.amzn2022.0.1.aarch64
    grub2-debugsource-2.06-22.amzn2022.0.1.aarch64
    grub2-efi-aa64-2.06-22.amzn2022.0.1.aarch64
    grub2-tools-extra-2.06-22.amzn2022.0.1.aarch64

noarch:
    grub2-efi-x64-modules-2.06-22.amzn2022.0.1.noarch
    grub2-common-2.06-22.amzn2022.0.1.noarch
    grub2-pc-modules-2.06-22.amzn2022.0.1.noarch
    grub2-efi-aa64-modules-2.06-22.amzn2022.0.1.noarch

src:
    grub2-2.06-22.amzn2022.0.1.src

x86_64:
    grub2-efi-x64-cdboot-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-extra-debuginfo-2.06-22.amzn2022.0.1.x86_64
    grub2-emu-modules-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-debuginfo-2.06-22.amzn2022.0.1.x86_64
    grub2-emu-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-minimal-debuginfo-2.06-22.amzn2022.0.1.x86_64
    grub2-pc-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-efi-2.06-22.amzn2022.0.1.x86_64
    grub2-debugsource-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-minimal-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-extra-2.06-22.amzn2022.0.1.x86_64
    grub2-tools-efi-debuginfo-2.06-22.amzn2022.0.1.x86_64
    grub2-debuginfo-2.06-22.amzn2022.0.1.x86_64
    grub2-emu-debuginfo-2.06-22.amzn2022.0.1.x86_64
    grub2-efi-x64-2.06-22.amzn2022.0.1.x86_64
    grub2-efi-x64-ec2-2.06-22.amzn2022.0.1.x86_64

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2022-2022-043

ALAS2022-2022-043

Vulmon Search

About

Products

Connect