https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:46:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:2110 <p><strong>Affected:</strong> AlmaLinux:8: grub2-common, AlmaLinux:8: grub2-efi-aa64, AlmaLinux:8: grub2-efi-aa64-cdboot, AlmaLinux:8: grub2-efi-aa64-modules, AlmaLinux:8: grub2-efi-ia32, AlmaLinux:8: grub2-efi-ia32-cdboot, AlmaLinux:8: grub2-efi-ia32-modules, AlmaLinux:8: grub2-efi-x64, AlmaLinux:8: grub2-efi-x64-cdboot, AlmaLinux:8: grub2-efi-x64-modules and 8 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: grub2-common, AlmaLinux:8: grub2-efi-aa64, AlmaLinux:8: grub2-efi-aa64-cdboot, AlmaLinux:8: grub2-efi-aa64-modules, AlmaLinux:8: grub2-efi-ia32, AlmaLinux:8: grub2-efi-ia32-cdboot, AlmaLinux:8: grub2-efi-ia32-modules, AlmaLinux:8: grub2-efi-x64, AlmaLinux:8: grub2-efi-x64-cdboot, AlmaLinux:8: grub2-efi-x64-modules and 8 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:2110 https://cve.radiocsirt.org/vuln/bdu:2023-07627 bdu:2023-07627 https://cve.radiocsirt.org/vuln/bdu:2023-07627 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0726 certfr-2023-avi-0726 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0726 https://cve.radiocsirt.org/vuln/euvd-2026-215978 EUVD-2026-215978 https://cve.radiocsirt.org/vuln/euvd-2026-215978 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3981 <p>A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.</p> <p>A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3981 https://cve.radiocsirt.org/vuln/ghsa-6hfm-rxpf-979r <p>A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.</p> <p>A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.</p> https://cve.radiocsirt.org/vuln/ghsa-6hfm-rxpf-979r https://cve.radiocsirt.org/vuln/gsd-2021-3981 gsd-2021-3981 https://cve.radiocsirt.org/vuln/gsd-2021-3981 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3981 msrc_CVE-2021-3981 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3981 https://cve.radiocsirt.org/vuln/oesa-2022-1597 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: grub2, openEuler:20.03-LTS-SP2: grub2, openEuler:20.03-LTS-SP3: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es): A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.(CVE-2021-3981)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: grub2, openEuler:20.03-LTS-SP2: grub2, openEuler:20.03-LTS-SP3: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es): A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.(CVE-2021-3981)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1597 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11700-1 <p>grub2-2.06-13.1 on GA media</p> <p>grub2-2.06-13.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11700-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3981 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned</p> <p>A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned</p> <p>A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3981 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0452 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grub2 ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grub2 ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0452