A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1520-1 advisory.

  - The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the     easy permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server     permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to     081d081dcfaf61710bda34bc21c80c66276119aa. (CVE-2019-3687)

  - The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including     version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had     squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain     persistence by changing the binary (CVE-2019-3688)

  - A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE     Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries     on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers     on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12     permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions     versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to     2013.1.7-0.6.12.1. (CVE-2020-8013)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2280-1 advisory.

  - The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including     version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had     squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain     persistence by changing the binary (CVE-2019-3688)

  - The chkstat tool in the permissions package followed symlinks before commit     a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix).
    This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.
    (CVE-2019-3690)

  - A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE     Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries     on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers     on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12     permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions     versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to     2013.1.7-0.6.12.1. (CVE-2020-8013)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for permissions fixes the following issues :

Security issue fixed :

CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim (bsc#1163922).

Non-security issues fixed :

Fixed regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594)

Fixed capability handling when doing multiple permission changes at once (bsc#1161779)

Fixed handling of relative directory symlinks in chkstat

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

Security issues fixed :

  - CVE-2019-3687: Fixed a privilege escalation which could     allow a local user to read network traffic if wireshark     is installed (bsc#1148788)

  - CVE-2020-8013: Fixed an issue where chkstat set     unintended setuid/capabilities for mrsh and wodim     (bsc#1163922).

Non-security issues fixed :

  - Fixed a regression where chkstat breaks without /proc     available (bsc#1160764, bsc#1160594).

  - Fixed capability handling when doing multiple permission     changes at once (bsc#1161779).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for permissions fixes the following issues :

Security issues fixed :

CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788)

CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922).

Non-security issues fixed: Fixed a regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594).

Fixed capability handling when doing multiple permission changes at once (bsc#1161779).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

Security issues fixed :

CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922).

Non-security issues fixed: Fixed a regression where chkstat broke when /proc was not available (bsc#1160764, bsc#1160594).

Fixed capability handling when doing multiple permission changes at once (bsc#1161779).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
155823	openSUSE 15 Security Update : permissions (openSUSE-SU-2021:1520-1)	Nessus	SuSE Local Security Checks	high
151491	SUSE SLES12 Security Update : permissions (SUSE-SU-2021:2280-1)	Nessus	SuSE Local Security Checks	high
136394	SUSE SLES15 Security Update : permissions (SUSE-SU-2020:1163-1)	Nessus	SuSE Local Security Checks	high
134283	openSUSE Security Update : permissions (openSUSE-2020-302)	Nessus	SuSE Local Security Checks	low
134203	SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:0547-1)	Nessus	SuSE Local Security Checks	low
134202	SUSE SLES12 Security Update : permissions (SUSE-SU-2020:0545-1)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2020-8013

low

Tenable Plugins

high

high

high

low

low

low