CVE-2019-3697: falha de alta gravidade em openSUSE Leap 15.1
Local privilege escalation from user gnump3d to root
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.7epss 0.5%
UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
openSUSE · Leap 15.1CVEs relacionadas — openSUSE Leap 15.1
No mesmo produto, das mais perigosas para as menos.
CVE-2019-18903HIGHwicked: Use-after-free when receiving invalid DHCP6 IA_PD optionEPSS 2.4%CVE-2019-18902HIGHwicked: Use-after-free when receiving invalid DHCP6 client optionsEPSS 2.4%CVE-2019-3692HIGHLocal privilege escalation from user news to root in the packaging of innEPSS 0.5%CVE-2019-3694HIGHLocal privilege escalation from munin to root in the packaging of muninEPSS 0.4%CVE-2019-3699HIGHLocal privilege escalation from user privoxy to rootEPSS 0.4%CVE-2019-3693HIGHLocal privilege escalation from user wwwrun to root in the packaging of mailmanEPSS 0.4%