A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.
Weakness
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Grub2 | Gnu | - (including) | - (including) |
| Red Hat Enterprise Linux 8 | RedHat | grub2-1:2.02-78.el8_1.1 | * |
| Grub2 | Ubuntu | trusty | * |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/58.html
- https://cwe.mitre.org/data/definitions/634.html
- https://cwe.mitre.org/data/definitions/637.html
- https://cwe.mitre.org/data/definitions/643.html
- https://cwe.mitre.org/data/definitions/648.html
References
- http://www.openwall.com/lists/oss-security/2024/02/06/3
- https://access.redhat.com/errata/RHSA-2020:0335
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
- https://seclists.org/oss-sec/2019/q4/101
- http://www.openwall.com/lists/oss-security/2024/02/06/3
- https://access.redhat.com/errata/RHSA-2020:0335
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865
- https://seclists.org/oss-sec/2019/q4/101