5.1
Medium
CVE-2019-3688 The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version…
Description
The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Server 15 4.8 | earliest → 4.8-5.8.1 | No fix stated |
| SUSE Linux Enterprise Server 12 3.5 | earliest → 3.5.21-26.17.1 | No fix stated |
Other CVEs of SUSE Linux Enterprise Server 15
The 13 CVEs of SUSE Linux Enterprise Server 15 →
CVE-2022-45154
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE…
4.4
Medium
CVE-2019-18905
A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE…
4.8
Medium
CVE-2019-18902
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE…
7.5
High
CVE-2019-18903
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE…
7.5
High