5.9

CVE-2019-14865

A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Grub2 Version -
   Redhat ≫ Enterprise Linux Version 8.0
   Redhat ≫ Enterprise Linux Eus Version 8.1
   Redhat ≫ Enterprise Linux Eus Version 8.2
   Redhat ≫ Enterprise Linux Eus Version 8.4
   Redhat ≫ Enterprise Linux Eus Version 8.6
   Redhat ≫ Enterprise Linux Eus Version 8.8
   Redhat ≫ Enterprise Linux Server Aus Version 8.2
   Redhat ≫ Enterprise Linux Server Aus Version 8.4
   Redhat ≫ Enterprise Linux Server Aus Version 8.6
   Redhat ≫ Enterprise Linux Server Tus Version 8.2
   Redhat ≫ Enterprise Linux Server Tus Version 8.4
   Redhat ≫ Enterprise Linux Server Tus Version 8.6
   Redhat ≫ Enterprise Linux Server Tus Version 8.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.249
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 1.5 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
RedHat 5.9 1.5 4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
CWE-267 Privilege Defined With Unsafe Actions

A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.

http://www.openwall.com/lists/oss-security/2024/02/06/3
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0335
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
Third Party Advisory
Issue Tracking
https://seclists.org/oss-sec/2019/q4/101
Third Party Advisory
Mailing List