Skip to content
Fencer Intel
medium 5.1

CVE-2019-18901 json

mysql-systemd-helper allows setting 640 permissions of arbitrary files

published 6y ago modified 4mo ago also EUVD-2019-8582

cvss
5.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 32%
public exploits
0
none known

Summary

A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.

Patch / fix

  • SUSE SUSE Linux Enterprise Server 12 10.2.31-3.25.1
  • SUSE SUSE Linux Enterprise Server 15 10.2.31-3.26.1
  • mariadb104 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 10.4.30-8.5.46
  • lz4 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.8.0-3.5.2
  • python-mysqlclient SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.3.14-8.9.2
  • mariadb-connector-c SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 3.1.22-2.35.1
  • mariadb OpenStack Cloud 7 10.2.31-16.1
  • mariadb OpenStack Cloud Crowbar 8, OpenStack Cloud 8, HPE Helion OpenStack 8 10.2.31-4.17.3
  • ardana-mq OpenStack Cloud 8, HPE Helion OpenStack 8 8.0+git.1581024906.fbf0be3-3.16.3
  • crowbar-ha OpenStack Cloud Crowbar 8 5.0+git.1574286229.e0364c3-3.29.3

suse advisories SUSE-RU-2023:4991-1SUSE-RU-2023:3956-1SUSE-SU-2020:0831-1SUSE-SU-2020:0640-1SUSE-SU-2020:0527-1SUSE-SU-2020:0505-1

  • mariadb openSUSE Tumbleweed 10.6.4-2.1
  • mariadb openSUSE Leap 15.1 10.2.31-lp151.2.12.1

opensuse advisories openSUSE-SU-2024:11038-1openSUSE-SU-2020:0289-1

Is CVE-2019-18901 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • SUSE SUSE Linux Enterprise Server 12
  • SUSE SUSE Linux Enterprise Server 15

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.