OSVersionArchitecturePackageVersionFilename
Photon3.0x86_64grub2-pc< 2.06-9.ph3grub2-pc-2.06-9.ph3.x86_64.rpm
Photon3.0x86_64coredns< 1.11.1-1.ph3coredns-1.11.1-1.ph3.x86_64.rpm
Photon3.0x86_64grub2< 2.06-9.ph3grub2-2.06-9.ph3.x86_64.rpm
Photon3.0x86_64grub2-lang< 2.06-9.ph3grub2-lang-2.06-9.ph3.x86_64.rpm
Photon3.0x86_64python-cryptography< 3.1.1-2.ph3python-cryptography-3.1.1-2.ph3.x86_64.rpm
Photon3.0x86_64grub2-efi< 2.06-9.ph3grub2-efi-2.06-9.ph3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Photon	3.0	x86_64	grub2-pc	< 2.06-9.ph3	grub2-pc-2.06-9.ph3.x86_64.rpm
Photon	3.0	x86_64	coredns	< 1.11.1-1.ph3	coredns-1.11.1-1.ph3.x86_64.rpm
Photon	3.0	x86_64	grub2	< 2.06-9.ph3	grub2-2.06-9.ph3.x86_64.rpm
Photon	3.0	x86_64	grub2-lang	< 2.06-9.ph3	grub2-lang-2.06-9.ph3.x86_64.rpm
Photon	3.0	x86_64	python-cryptography	< 3.1.1-2.ph3	python-cryptography-3.1.1-2.ph3.x86_64.rpm
Photon	3.0	x86_64	grub2-efi	< 2.06-9.ph3	grub2-efi-2.06-9.ph3.x86_64.rpm

photon 7

nessus 58

redhat 4

redos 2

openvas 37

ubuntu 2

debian 4

amazon 1

osv 18

redhatcve 5

fedora 6

almalinux 2

rocky 1

oraclelinux 3

debiancve 5

ubuntucve 5

gitlab 1

nvd 3

github 3

altlinux 1

prion 4

cve 4

veracode 4

ibm 5

cbl_mariner 7

cvelist 4

freebsd 1

mageia 2

photon

Critical Photon OS Security Update - PHSA-2023-4.0-0505

2023-11-04 00:00:00

Moderate Photon OS Security Update - PHSA-2023-4.0-0398

2023-05-25 00:00:00

Critical Photon OS Security Update - PHSA-2023-5.0-0135

2023-11-03 00:00:00

nessus

RHEL 9 : Red Hat OpenStack Platform 17.0 (etcd) (RHSA-2023:3441)

2024-04-28 00:00:00

Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2023-408)

2023-11-04 00:00:00

EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2024-1009)

2024-01-16 00:00:00

redhat

(RHSA-2023:3441) Important: Red Hat OpenStack Platform 17.0 (etcd) security update

2023-06-05 13:50:17

(RHSA-2024:2456) Moderate: grub2 security update

2024-04-30 06:15:45

(RHSA-2024:3184) Moderate: grub2 security update

2024-05-22 06:35:52

redos

ROS-20240405-01

2024-04-05 00:00:00

ROS-20240411-02

2024-04-11 00:00:00

openvas

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1035)

2024-01-05 00:00:00

Debian: Security Advisory (DLA-3605-1)

2023-10-06 00:00:00

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1427)

2024-03-21 00:00:00

ubuntu

GRUB2 vulnerabilities

2023-10-04 00:00:00

etcd vulnerability

2023-06-28 00:00:00

debian

[SECURITY] [DSA 5519-1] grub2 security update

2023-10-06 19:03:15

[SECURITY] [DLA 3605-1] grub2 security update

2023-10-05 21:45:55

[SECURITY] [DLA 3331-1] python-cryptography security update

2023-02-22 20:00:30

amazon

Important: grub2

2023-10-12 15:08:00

osv

grub2-signed, grub2-unsigned vulnerabilities

2023-10-04 01:31:42

grub2 - security update

2023-10-06 00:00:00

grub2 - security update

2023-10-06 00:00:00

redhatcve

CVE-2023-4692

2023-10-03 18:24:36

CVE-2023-4693

2023-10-03 18:24:46

CVE-2021-28235

2023-04-04 18:13:12

fedora

[SECURITY] Fedora 39 Update: grub2-2.06-120.fc39

2024-04-29 01:55:42

[SECURITY] Fedora 38 Update: grub2-2.06-118.fc38

2024-05-03 01:36:58

[SECURITY] Fedora 40 Update: grub2-2.06-121.fc40

2024-04-23 01:15:56

almalinux

Moderate: grub2 security update

2024-05-22 00:00:00

Moderate: grub2 security update

2024-04-30 00:00:00

rocky

grub2 security update

2024-06-14 13:59:16

oraclelinux

grub2 security update

2024-05-03 00:00:00

grub2 security update

2024-05-24 00:00:00

python-cryptography security update

2023-11-11 00:00:00

debiancve

CVE-2021-28235

2023-04-04 15:15:08

CVE-2023-23931

2023-02-07 21:15:09

CVE-2023-4693

2023-10-25 18:17:41

ubuntucve

CVE-2021-28235

2023-04-04 00:00:00

CVE-2023-32082

2023-05-11 00:00:00

CVE-2023-4693

2023-10-03 00:00:00

gitlab

Improper Authentication

2023-04-04 00:00:00

nvd

CVE-2021-28235

2023-04-04 15:15:08

CVE-2023-32082

2023-05-11 20:15:09

CVE-2023-4693

2023-10-25 18:17:41

github

Etcd-io Improper Authentication vulnerability

2023-04-04 15:30:27

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf

2023-02-07 20:54:10

etcd Key name can be accessed via LeaseTimeToLive API

2023-05-12 20:19:50

altlinux

Security fix for the ALT Linux 10 package etcd version 3.5.8-alt1

2023-04-17 00:00:00

prion

Authentication flaw

2023-04-04 15:15:00

Code injection

2023-05-11 20:15:00

Design/Logic Flaw

2023-10-25 18:17:00

cve

CVE-2021-28235

2023-04-04 15:15:08

CVE-2023-32082

2023-05-11 20:15:09

CVE-2023-23931

2023-02-07 21:15:09

veracode

Privilege Escalation

2023-04-17 12:06:26

Information Disclosure

2023-05-17 05:21:49

Memory Corruption

2023-02-08 08:28:21

ibm

Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Advanced [CVE-2021-28235]

2023-05-25 13:06:44

Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 1.0(CPDS 1.0) [CVE-2023-23931]

2023-04-03 13:35:13

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in cryptography

2023-05-02 21:53:16

cbl_mariner

CVE-2021-28235 affecting package etcd for versions less than 3.5.4-6

2023-02-14 20:38:30

CVE-2023-32082 affecting package etcd for versions less than 3.5.3-10

2023-02-14 20:24:03

CVE-2023-23931 affecting package python-cryptography for versions less than 3.3.2-5

2024-03-19 17:21:46

cvelist

CVE-2021-28235

2023-04-04 00:00:00

CVE-2023-32082 etcd key name can be accessed via LeaseTimeToLive API

2023-05-11 19:22:56

CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography

2023-02-07 20:54:03

freebsd

py-cryptography -- allows programmers to misuse an API

2023-02-07 00:00:00

mageia

Updated python-cryptography packages fix security vulnerability

2023-02-27 23:27:16

Updated grub2 packages fix security vulnerabilities

2024-03-28 06:52:55

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

JSON

Related for PHSA-2023-3.0-0681