CVE-2019-3699

published 2020-01-24

CVE-2019-3699: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
opensuse	factory	privoxy – 3.0.28-2.1	—
opensuse	leap_15.1	privoxy – 3.0.28-lp151.1.1	—
privoxy	privoxy	< 3.0.28-lp151.1.1	3.0.28-lp151.1.1
privoxy	privoxy	< 3.0.28-2.1	3.0.28-2.1

CWE-59