The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1520-1 advisory.

  - The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the     easy permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server     permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to     081d081dcfaf61710bda34bc21c80c66276119aa. (CVE-2019-3687)

  - The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including     version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had     squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain     persistence by changing the binary (CVE-2019-3688)

  - A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE     Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries     on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers     on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12     permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions     versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to     2013.1.7-0.6.12.1. (CVE-2020-8013)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for permissions fixes the following issues :

Security issues fixed :

  - CVE-2019-3687: Fixed a privilege escalation which could     allow a local user to read network traffic if wireshark     is installed (bsc#1148788)

  - CVE-2020-8013: Fixed an issue where chkstat set     unintended setuid/capabilities for mrsh and wodim     (bsc#1163922).

Non-security issues fixed :

  - Fixed a regression where chkstat breaks without /proc     available (bsc#1160764, bsc#1160594).

  - Fixed capability handling when doing multiple permission     changes at once (bsc#1161779).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for permissions fixes the following issues :

Security issues fixed :

CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788)

CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922).

Non-security issues fixed: Fixed a regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594).

Fixed capability handling when doing multiple permission changes at once (bsc#1161779).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
155823	openSUSE 15 Security Update : permissions (openSUSE-SU-2021:1520-1)	Nessus	SuSE Local Security Checks	high
134283	openSUSE Security Update : permissions (openSUSE-2020-302)	Nessus	SuSE Local Security Checks	low
134203	SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:0547-1)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2019-3687

low

Tenable Plugins

high

low

low