CVE-2019-14865

A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.

• CWE-267

• http://www.openwall.com/lists/oss-security/2024/02/06/3Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0335Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865Issue Tracking, Third Party Advisory
• https://seclists.org/oss-sec/2019/q4/101Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/02/06/3Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0335Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865Issue Tracking, Third Party Advisory
• https://seclists.org/oss-sec/2019/q4/101Mailing List, Third Party Advisory

Published

Nov 29, 2019

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1486A spoofing vulnerability exists in Visual Studio Live Share …6.1
• CVE-2019-14860It was found that the Syndesis configuration for Cross-Origi…6.5
• CVE-2019-14861All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.1…5.3
• CVE-2019-14862There is a vulnerability in knockout before version 3.5.0-be…6.1
• CVE-2019-14863There is a vulnerability in all angular versions before 1.5.…6.1
• CVE-2019-14864Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and…6.5
• CVE-2019-14866In all versions of cpio before 2.13 does not properly valida…7.3
• CVE-2019-14867A flaw was found in IPA, all 4.6.x versions before 4.6.7, al…8.8
• CVE-2019-14868In ksh version 20120801, a flaw was found in the way it eval…7.8
• CVE-2019-14869A flaw was found in all versions of ghostscript 9.x before 9…8.8
• CVE-2019-1487An information disclosure vulnerability in Android Apps usin…6.5
• CVE-2019-14870All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.1…5.4