{"answers":{"affected":"It affects 1 product.","exploited":"There is no known exploitation of CVE-2019-3688 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2019-3688 is a medium-severity vulnerability in Suse Suse Linux Enterprise Server, published on 7 Oct 2019. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2019-3688 and fix it if it is affected.\n\nWhat it is: CVE-2019-3688 is a medium-severity vulnerability in Suse Suse Linux Enterprise Server, published on 7 Oct 2019. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2019-3688 in the wild and no public exploit code.\n\nAffected product: Suse Suse Linux Enterprise Server. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2019-3688/ (Markdown: https://insights.sbomify.com/CVE-2019-3688/index.md)","id":"CVE-2019-3688","markdown":"https://insights.sbomify.com/CVE-2019-3688/index.md","name":"CVE-2019-3688","record":{"aliases":["GHSA-mx4x-652m-w4fw"],"analysis":{"component_type":"operating_system","fix_type":"patch","impacts":["privilege_escalation"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"SUSE Linux Server","requires_auth":"none","summary":"An attacker with squid user access can modify the pinger binary to gain persistence and escalate privileges due to incorrect file permissions.","user_interaction":"not_required","vuln_class":"privilege_escalation"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"suse","cpe":[{"product":"suse_linux_enterprise_server","vendor":"suse"}],"cvss":{"score":5.1,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"cwes":[{"id":"CWE-276","name":"Incorrect Default Permissions"}],"description":"The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"squid: /usr/sbin/pinger packaged with wrong permission","id":"CVE-2019-3688","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"suse:suse_linux_enterprise_server","products":["suse:suse_linux_enterprise_server"],"type":"privilege_escalation","year":"2019"},"n_packages":0,"n_references":4,"next":{"headline":"nfs-utils: root-owned files stored in insecure /var/lib/nfs directory","id":"CVE-2019-3689"},"packages":[],"prev":{"headline":"\"easy\" permission profile allows everyone execute dumpcap and read all network traffic","id":"CVE-2019-3687"},"products":["SUSE Linux Enterprise Server 12","SUSE Linux Enterprise Server 15"],"published":"2019-10-07","related":[{"cvss_score":5.4,"headline":"unix2_chkpwd do not check for a valid account","id":"CVE-2011-3172","kev_date_added":null,"published":"2018-06-08"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2024-09-16","vendors":["SUSE"]},"summary":"An attacker with squid user access can modify the pinger binary to gain persistence and escalate privileges due to incorrect file permissions.","url":"https://insights.sbomify.com/CVE-2019-3688/"}