Skip to content
Fencer Intel
medium 5.1

CVE-2019-3688 json

squid: /usr/sbin/pinger packaged with wrong permission

published 7y ago modified 4mo ago also EUVD-2019-13323

cvss
5.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 27%
public exploits
0
none known

Summary

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

Patch / fix

  • permissions SLES for SAP 12 SP5, SLES 12 SP5 20170707-6.4.1
  • permissions SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 20180125-3.21.1
  • permissions SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +2 more 20170707-3.14.1
  • permissions SLE Module for Basesystem 15 20180125-3.18.1
  • permissions SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES 12 SP3-LTSS +8 more 2015.09.28.1626-17.20.1
  • squid SLE Module for Server Applications 15 SP1, SLE Module for Server Applications 15 4.9-5.11.1

suse advisories SUSE-SU-2021:2280-1SUSE-SU-2020:1163-1SUSE-SU-2019:3183-1SUSE-SU-2019:3182-1SUSE-SU-2019:3180-1SUSE-SU-2019:2975-1

  • permissions openSUSE Tumbleweed 1550_20210901.1550-29.2
  • permissions openSUSE Leap 15.3 20200127-lp153.24.3.1
  • permissions openSUSE Leap 15.1 20181116-lp151.4.9.1
  • squid openSUSE Leap 15.1 4.9-lp151.2.7.1
  • squid openSUSE Leap 15.0 4.9-lp150.13.1

opensuse advisories openSUSE-SU-2024:11165-1openSUSE-SU-2021:1520-1openSUSE-SU-2019:2672-1openSUSE-SU-2019:2541-1openSUSE-SU-2019:2540-1

Is CVE-2019-3688 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.34% chance of exploitation in the next 30 days, higher than 27% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
NVD 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
NVD 2.0 6.6 AV:L/AC:L/Au:N/C:N/I:C/A:C

Affected products

  • SUSE SUSE Linux Enterprise Server 15
  • SUSE SUSE Linux Enterprise Server 12

Classification

Weakness
  • CWE-276 Incorrect Default Permissions

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.