CVE-2019-3687: "easy" permission profile allows everyone execute dumpcap and read all network traffic

Published Jan 24, 2020

Updated

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.

Affected Software

1 affected component

SUSE Linux Enterprise Server

Event History

Jan 24, 2020

CVE Published

via MITRE·08:25 AM

Data Sourced

via MITRE·08:25 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-3687?

CVE-2019-3687 is a vulnerability in the permission package in SUSE Linux Enterprise Server that allows all local users to run dumpcap in the "easy" permission profile and sniff network traffic.

How does CVE-2019-3687 affect SUSE Linux Enterprise Server?

CVE-2019-3687 affects SUSE Linux Enterprise Server versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710b.

What is the severity of CVE-2019-3687?

CVE-2019-3687 has a severity rating of medium (3.3).

How can I fix CVE-2019-3687?

To fix CVE-2019-3687, it is recommended to update the permission package in SUSE Linux Enterprise Server to a version that addresses the vulnerability.

Where can I find more information about CVE-2019-3687?

More information about CVE-2019-3687 can be found in the following references: [reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html), [reference 2](https://bugzilla.suse.com/show_bug.cgi?id=1148788).