CVE-2019-3688

—

CVSS 3.1

7.1 high

EPSS

<1%p27

Published

Oct 7, 2019 (Oct 7, 2019)

Modified

Jun 17, 2026

Description

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

Vendors: suse
Products: suse linux enterprise server
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.