CVE-2019-14865CWE-267

A flaw was found in the grub2-set-bootflag utility of grub2

Medium · published November 29, 2019

CVSS v3.0
5.9
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.0th percentile
Weakness
CWE-267 · Privilege Defined With Unsafe Actions
Published
2019-11-29T09:50Z
EPSS history
Timeline
  • 29 NOV 09:50Z
    A flaw was found in the grub2-set-bootflag utility of grub2
    cvelistv5