Skip to content
OpenAdvisories
High · 7.7 CVE-2019-3697 EUVD-2019-13332GHSA-87jq-f9rw-6m54

Local privilege escalation from user gnump3d to root

Published Jan 24, 2020 · Updated Sep 17, 2024 · Assigned by suse

Vendor: openSUSE Product: Leap 15.1

Description

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.

Affected products

VendorProductAffectedFixed
openSUSE Leap 15.1 gnump3d – ≤ 3.0-lp151.2.1 —

References