CVE-2019-14865

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-29 · updated 2026-06-17
Weakness: CWE-267

Description

A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.

Affected products

grub2: all versions

References

http://www.openwall.com/lists/oss-security/2024/02/06/3
https://access.redhat.com/errata/RHSA-2020:0335
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
https://seclists.org/oss-sec/2019/q4/101
http://www.openwall.com/lists/oss-security/2024/02/06/3
https://access.redhat.com/errata/RHSA-2020:0335
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
https://seclists.org/oss-sec/2019/q4/101

Get alerted when CVE-2019-14865 or the next vulnerability affects your stack