Skip to content
fr Sign in
7.7 High

CVE-2019-3699 UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows…

Description

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.

Affected products and versions

Product Affected versions Fixed in
Leap 15.1 3.0 earliest → 3.0.28-lp151.1.1 No fix stated
Factory 3.0 earliest → 3.0.28-2.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Leap 15.1

The 8 CVEs of Leap 15.1 →
CVE-2019-18902 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2019-18903 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2019-3697 UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local… 7.7 High CVE-2019-3694 A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows… 7.7 High
Track this CVE