CVE-2019-3688 PUBLISHED CVSS 5.099999904632568 MEDIUM

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

EPSS 0.06% · 17.7th percentile

Risk Scores

CVSS v3.1
5.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS Score
0.06%
17.7th percentile

Affected Products

VendorProductVersions
SUSESUSE Linux Enterprise Server 12squid
SUSESUSE Linux Enterprise Server 15squid
susesuse_linux_enterprise_server12, 15, 15

Timeline

References

Open in Interactive Console →