CVE-2019-3689

CRITICAL EPSS 71.0%

Published Sep 19, 20196y ago · Modified Jun 17, 20262w ago

9.8 CVSS 3.1

Critical

Published Sep 19, 2019 6y ago

Last Modified Jun 17, 2026 2w ago

Description

The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.

CVSS Details

Base Score

9.8

Exploitability

3.9

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

71.0% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-276

Affected Products 4

Vendor	Product	Version	Range
linux-nfs	nfs-utils	*	≤1.3.0-34.18.1
suse	linux_enterprise_server	12	any
linux-nfs	nfs-utils	*	≤2.1.1-6.10.2
suse	linux_enterprise_server	15	any

References 6

lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00071.html

Vendor Advisory
lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00006.html

Vendor Advisory
bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1150733

Issue TrackingPatchVendor Advisory
git.linux-nfs.org https://git.linux-nfs.org/?p=steved/nfs-utils.git%3Ba=commitdiff%3Bh=fee2cc29e888f2ced6a76990923aef19d326dc0e
lists.debian.org https://lists.debian.org/debian-lts-announce/2019/10/msg00026.html

Third Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/4400-1/

Third Party Advisory

Remediation

bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1150733

Issue TrackingPatchVendor Advisory