CVE-2019-14865
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this...
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
- Record
CVE-2019-14865- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H - Weakness
- CWE-267
- Updated
- 2026-11-02
EUVDEUVD-2019-5981
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
- Record
EUVD-2019-5981- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5c3m-78cg-3wpv
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this...
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
- Record
GHSA-5c3m-78cg-3wpv- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-267
- Updated
- 2026-11-02
NVD
A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
- Record
CVE-2019-14865- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H - CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-267
- Updated
- 2026-11-02
OSVRHSA-2020:0335
Red Hat Security Advisory: grub2 security update
- Record
RHSA-2020:0335- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
grub2Red Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-commonRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-debugsourceRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-aa64Red Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-aa64-cdbootRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-aa64-modulesRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-ia32Red Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-ia32-cdbootRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-ia32-modulesRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
grub2-efi-x64Red Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-x64-cdbootRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-efi-x64-modulesRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-pcRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-pc-modulesRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-ppc64leRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-ppc64le-modulesRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-toolsRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-efiRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-efi-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-extraRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-extra-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-minimalRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
grub2-tools-minimal-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.02-78.el8_1.1 | 1:2.02-78.el8_1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14865 is a medium vulnerability (CVSS 5.9) in [unknown] Grub2, published November 29, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in grub2 1:2.02-78.el8_1.1.