Test ID:	1.3.6.1.4.1.25623.1.1.2.2023.1595
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2023-1595)
Summary:	The remote host is missing an update for the Huawei EulerOS 'grub2' package(s) announced via the EulerOS-SA-2023-1595 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'grub2' package(s) announced via the EulerOS-SA-2023-1595 advisory. Vulnerability Insight: When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.(CVE-2022-3775) Affected Software/OS: 'grub2' package(s) on Huawei EulerOS V2.0SP8. Solution: Please install the updated package(s). CVSS Score: 6.2 CVSS Vector: AV:L/AC:L/Au:S/C:N/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-3775 https://security.gentoo.org/glsa/202311-14 https://access.redhat.com/security/cve/cve-2022-3775
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.