SUSE-SU-2019:3183-1: permissions&distro=SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 05-12-2019Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2019:3183-1 is a vulnerability in permissions&distro=SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2019-3688CVE-2019-3690

Timeline

  1. 05-12-2019
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for permissions This update for permissions fixes the following issues: Security issues fixed: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734). Other issue addressed: - Corrected a badly constracted file which could have allowed treating of the shell environment as permissions files (bsc#1097665,bsc#1047247). - Fixed a regression which caused sagmentation fault (bsc#1157198).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse5 products
  • permissions&distro=SUSE Linux Enterprise Desktop 12 SP4< 20170707-3.14.1
  • permissions&distro=SUSE Linux Enterprise Server 12 SP4< 20170707-3.14.1
  • permissions&distro=SUSE Linux Enterprise Server 12 SP5< 20170707-3.14.1
  • permissions&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 20170707-3.14.1
  • permissions&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 20170707-3.14.1

1 vendor · 5 products

References

8 links