Read the docs
TI-2019-02709 Aliases CVE-2019-3687GHSA-q4cf-vq5x-23pq

"easy" permission profile allows everyone execute dumpcap and read all network traffic

Priority LOW 19CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.

Why it matters now

EPSS 0.00275 19th percentileScored 2026-11-07
Fix Fixed SUSE Linux Enterprise Server (SUSE): 081d081dcfaf61710bda34bc21c80c66276119aa

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSESUSE Linux Enterprise Serverpermissions to before 081d081dcfaf61710bda34bc21c80c66276119aa081d081dcfaf61710bda34bc21c80c66276119aaPatch availableCNA
  • SUSE Linux Enterprise Server VendorSUSE Affected permissions to before 081d081dcfaf61710bda34bc21c80c66276119aa Fixed in 081d081dcfaf61710bda34bc21c80c66276119aa Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:suse:linux_enterprise_server:-:*:*:*:*:*:*:*not specified by NVDVulnerableSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SUSE

Remediation

  • Fix · CNA SUSE Linux Enterprise Server (SUSE) Fixed in 081d081dcfaf61710bda34bc21c80c66276119aa

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3687
  2. 2026-10-03 Alias added: GHSA-q4cf-vq5x-23pq

References

Advisory 2

  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-02923 Access control flaw in ProFTPD mod_copy allows arbitrary file access KEVCVSS 3.1CRITICAL 10.0
  • TI-2015-02278 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2013-02212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… KEVCVSS 3.1CRITICAL 9.8
See all 475 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences