{"id":"CVE-2019-14865","aliases":["EUVD-2019-5981","GHSA-5c3m-78cg-3wpv","RHSA-2020:0335"],"status":"published","title":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this...","description":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00324,"percentile":0.25575,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-267"],"published":"2019-11-29T09:50:12Z","modified":"2026-06-17T02:19:11Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-common","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debuginfo","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debugsource","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-cdboot","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-modules","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-cdboot","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-modules","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-modules","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc-modules","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le-modules","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-debuginfo","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi-debuginfo","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra-debuginfo","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal-debuginfo","fixed_in":["1:2.02-78.el8_1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-78.el8_1.1"}]}]}],"products":[{"vendor":"[unknown]","product":"grub2"},{"vendor":"gnu","product":"grub2"}],"references":[{"url":"https://seclists.org/oss-sec/2019/q4/101","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0335","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/06/3","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14865","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764925","tags":["report"]},{"url":"https://github.com/advisories/GHSA-5c3m-78cg-3wpv"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0335.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14865","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-14865","description":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.","status":"published","published":"2019-11-29T09:50:12Z","modified":"2025-02-13T16:27:23.142Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-267"],"updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5981","description":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.","status":"published","published":"2019-11-29T09:50:12Z","modified":"2025-02-13T16:27:23Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:03:53.290549Z"}],"ghsa":[{"id":"GHSA-5c3m-78cg-3wpv","title":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this...","description":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.","status":"published","published":"2022-05-24T17:02:23Z","modified":"2024-02-16T05:07:53Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-267"],"updated_at":"2026-11-02T14:55:37.270786Z"}],"nvd":[{"id":"CVE-2019-14865","description":"A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.","status":"published","published":"2019-11-29T10:15:12.83Z","modified":"2026-06-17T02:19:11.953Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-267"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"RHSA-2020:0335","title":"Red Hat Security Advisory: grub2 security update","status":"published","published":"2024-09-16T03:22:34Z","modified":"2025-11-22T11:55:00Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"}]}}