CVE-2019-3690

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix). This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
SUSE	permissions	>= unspecified, < a9e1d26cd49ef9ee0c2060c859321128a6dd4230

References

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.htmlThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1150734Issue Tracking, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.htmlThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1150734Issue Tracking, Third Party Advisory

Timeline

Published: Dec 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-36917.8A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed loc CVE-2019-36927.8The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to roo CVE-2019-36937.8A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE CVE-2019-36947.8A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalat CVE-2019-36957.8A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS,CVE-2019-36967.3A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performanc CVE-2019-36977.8UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate fr CVE-2019-36987.0UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enter CVE-2019-36997.8UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to es CVE-2019-37003.3yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure CVE-2019-37014.4An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwis CVE-2019-37028.8A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute