Vulnerability record · CVE-2019-3688 · published 7 October 2019

CVE-2019-3688: Suse linux enterprise server incorrect default permissions vulnerability

Suse · Suse Linux Enterprise Server

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

7.1 CVSS 3.1 High EPSS 0.34% · top 75.3% CWE-276 · Incorrect default permissions

7.1CVSS 3.1 base score, v2 6.6

0.34%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Suse Linux Enterprise Server Suse

References

Link	Tags
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html
https://bugzilla.suse.com/show_bug.cgi?id=1093414	Issue TrackingVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html
https://bugzilla.suse.com/show_bug.cgi?id=1093414	Issue TrackingVendor Advisory

Track CVE-2019-3688 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2016-3714ImageMagick coders allow command execution via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 fail to validate input in multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, PLT), allo…KEVEPSS 97%analysed5 May 2016 5.5CVE-2014-0196Linux kernel n_tty_write race condition allows local privilege escalationThe n_tty_write function in the Linux kernel through 3.14.3 mishandles tty driver access in the LECHO & !OPOST case, creating a race condition betwee…KEVEPSS 22%analysed7 May 2014 10.0CVE-2015-2738Canonical ubuntu linux vulnerabilityThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8…EPSS 2.7%6 Jul 2015 10.0CVE-2015-2737Mozilla firefox vulnerabilityThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before …EPSS 2.7%6 Jul 2015 10.0CVE-2015-2734Suse linux enterprise desktop vulnerabilityThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 a…EPSS 2.7%6 Jul 2015 10.0CVE-2014-2977Opensuse vulnerabilityMultiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote a…EPSS 6.8%11 Jun 2014 10.0CVE-2014-2978Directfb memory buffer overflow vulnerabilityThe Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service …EPSS 6.1%11 Jun 2014 10.0CVE-2014-1512Mozilla firefox use after free vulnerabilityUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbi…EPSS 29%19 Mar 2014

Source: NIST National Vulnerability Database (record CVE-2019-3688), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.