CVE-2019-14865

Опубликовано: 29 нояб. 2019

Источник: nvd

CVSS3: 5.9

CVSS2: 4.9

EPSS Низкий

Описание

A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.

Ссылки

http://www.openwall.com/lists/oss-security/2024/02/06/3
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0335
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
Issue Tracking
Third Party Advisory
https://seclists.org/oss-sec/2019/q4/101
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/02/06/3
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0335
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
Issue Tracking
Third Party Advisory
https://seclists.org/oss-sec/2019/q4/101
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:gnu:grub2:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00055

Низкий

5.9 Medium

CVSS3

5.9 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-267

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-14865

CVSS3: 5.9

ubuntu

около 6 лет назад

CVE-2019-14865

CVSS3: 5.9

redhat

около 6 лет назад

CVE-2019-14865

CVSS3: 5.9

debian

около 6 лет назад

A flaw was found in the grub2-set-bootflag utility of grub2. A local a ...

GHSA-5c3m-78cg-3wpv

CVSS3: 5.5

github

больше 3 лет назад

ELSA-2020-0335

oracle-oval

около 6 лет назад

ELSA-2020-0335: grub2 security update (MODERATE)

EPSS

Процентиль: 17%

0.00055

Низкий

5.9 Medium

CVSS3

5.9 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-267

NVD-CWE-noinfo