Skip to content
fr Sign in
7.7 High

CVE-2019-3691 A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE…

Description

A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 15 0.5 earliest → < 0.5.13-4.3.1 0.5.13-4.3.1
Factory 0.5 earliest → < 0.5.13-6.1 0.5.13-6.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Linux Enterprise Server 15

The 13 CVEs of SUSE Linux Enterprise Server 15 →
CVE-2022-45154 A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE… 4.4 Medium CVE-2019-18905 A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE… 4.8 Medium CVE-2019-18902 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2019-18903 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High
Track this CVE