PT-2019-16649
CVE-2019-3688
·
تاريخ النشر
2019-10-07
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise Server 15 versions prior to 4.8-5.8.1
SUSE Linux Enterprise Server 12 versions prior to 3.5.21-26.17.1
Description
The issue concerns the /usr/sbin/pinger binary packaged with squid, which had
squid:root and 0750 permissions. This allowed an attacker who compromised the squid user to gain persistence by modifying the binary.Recommendations
For SUSE Linux Enterprise Server 15 versions prior to 4.8-5.8.1, update to version 4.8-5.8.1 or later to resolve the issue.
For SUSE Linux Enterprise Server 12 versions prior to 3.5.21-26.17.1, update to version 3.5.21-26.17.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾