CVE-2019-3689: medium-severity vulnerability in SUSE Linux Enterprise Server 12
nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The nfs-utils package stores root-owned files in a directory controlled by a non-root user (statd), allowing a compromised statd process to trick the system into creating or overwriting files as root. This can lead to unauthorized system modification and privilege escalation.
CWE-276 vulnerability in nfs-utils where /var/lib/nfs directory is owned by statd:nogroup but contains root-owned files. An attacker who compromises the statd daemon can leverage directory permissions to conduct symlink attacks or race conditions, tricking root processes into creating or overwriting arbitrary files on the system.
In the same product, most dangerous first.