What is CVE-2019-3687?

CVE-2019-3687 is a vulnerability in the permission package in SUSE Linux Enterprise Server that allows all local users to run dumpcap in the "easy" permission profile and sniff network traffic.

How does CVE-2019-3687 affect SUSE Linux Enterprise Server?

CVE-2019-3687 affects SUSE Linux Enterprise Server versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710b.

What is the severity of CVE-2019-3687?

CVE-2019-3687 has a severity rating of medium (3.3).

Where can I find more information about CVE-2019-3687?

More information about CVE-2019-3687 can be found in the following references: [reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html), [reference 2](https://bugzilla.suse.com/show_bug.cgi?id=1148788).

Vulnerability/
CVE-2019-3687

medium

CWE

276

30/8/2019

4/8/2024

CVE-2019-3687: "easy" permission profile allows everyone execute dumpcap and read all network traffic

First published: Fri Aug 30 2019(Updated: )

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.

Credit: meissner@suse.de

Affected Software	Affected Version	How to fix
SUSE Linux Enterprise Server

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-3687?
CVE-2019-3687 is a vulnerability in the permission package in SUSE Linux Enterprise Server that allows all local users to run dumpcap in the "easy" permission profile and sniff network traffic.
How does CVE-2019-3687 affect SUSE Linux Enterprise Server?
CVE-2019-3687 affects SUSE Linux Enterprise Server versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710b.
What is the severity of CVE-2019-3687?
CVE-2019-3687 has a severity rating of medium (3.3).
How can I fix CVE-2019-3687?
To fix CVE-2019-3687, it is recommended to update the permission package in SUSE Linux Enterprise Server to a version that addresses the vulnerability.
Where can I find more information about CVE-2019-3687?
More information about CVE-2019-3687 can be found in the following references: [reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html), [reference 2](https://bugzilla.suse.com/show_bug.cgi?id=1148788).

agent/references
agent/type
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
agent/weakness
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/title
agent/tags
agent/event
agent/first-publish-date
vendor/suse
canonical/suse linux enterprise server

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.