CVE-2019-3697

CWE-593 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 67.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Opensuse Leap 15.1GNU Gnump3dOpensuse Leap
Timeline
PublishedJan 24
Latest updateMay 24

Description

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.5 | Impact: 5.2

Affected Packages3 packages

▶CVEListV5opensuse/leap_15.1gnump3d — 3.0-lp151.2.1
▶NVDopensuse/leap15.1
▶NVDgnu/gnump3d3.0

🔴Vulnerability Details

2
GHSA
GHSA-87jq-f9rw-6m54: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15↗2022-05-24
▶
CVEList
Local privilege escalation from user gnump3d to root↗2020-01-24
▶