5.1
Moyenne
CVE-2019-3688 The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version…
Description
The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise Server 15 4.8 | premières → 4.8-5.8.1 | Pas de correctif indiqué |
| SUSE Linux Enterprise Server 12 3.5 | premières → 3.5.21-26.17.1 | Pas de correctif indiqué |
Autres CVE de SUSE Linux Enterprise Server 15
Les 13 CVE de SUSE Linux Enterprise Server 15 →
CVE-2022-45154
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE…
4.4
Moyenne
CVE-2019-18905
A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE…
4.8
Moyenne
CVE-2019-18902
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE…
7.5
Élevée
CVE-2019-18903
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE…
7.5
Élevée