CVE-2019-3692

🗓️ 24 Jan 2020 09:15:13Reported by [email protected]Type

The packaging of inn on SUSE Linux and openSUSE allows local attackers to escalate from user inn to root via symlink attacks

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the inn package in operating systems such as OpenSUSE Leap and SUSE Linux Enterprise Server, as well as openSUSE Factory, stems from incorrect handling of links before accessing files. This allows attackers to gain unauthorized access to protected information and execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
CVE	CVE-2019-3692	24 Jan 202008:50	–	cve
Cvelist	CVE-2019-3692 Local privilege escalation from user news to root in the packaging of inn	24 Jan 202008:50	–	cvelist
EUVD	EUVD-2019-13327	7 Oct 202500:30	–	euvd
Tenable Nessus	openSUSE Security Update : inn (openSUSE-2020-234)	20 Feb 202000:00	–	nessus
OPENSUSE Linux	Security update for inn (moderate)	19 Feb 202000:00	–	opensuse
OPENSUSE Linux	Security update for inn (moderate)	24 Feb 202000:00	–	opensuse
OpenVAS	openSUSE: Security Advisory for inn (openSUSE-SU-2020:0234-1)	20 Feb 202000:00	–	openvas
OSV	OPENSUSE-SU-2020:0234-1 Security update for inn	19 Feb 202019:13	–	osv
OSV	OPENSUSE-SU-2020:0242-1 Security update for inn	24 Feb 202017:19	–	osv

NVD

Node

suse innRange≤2.4.2-170.21.3.1

AND

Node

suse innRange≤2.6.2-2.2

AND

Node

suse innRange≤2.5.4-lp151.2.47

AND

Node

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00028.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00027.html
bugzilla	www.bugzilla.suse.com/show_bug.cgi

21 Nov 2024 04:42Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2

CVSS 3.17.7 - 7.8

EPSS0.00168