Read the docs
TI-2019-02717 Aliases CVE-2019-3695GHSA-3g68-p942-4533

pcp: Local privilege escalation from user pcp to root

Priority LOW 37CWE-94Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 9 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-94.

Summary

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows the user pcp to run code as root by placing it into /var/log/pcp/configs.sh This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1.

Why it matters now

EPSS 0.00475 41st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial SUSE Linux Enterprise High Performance Computing 15-ESPOS (SUSE): 3.11.9-5.8.1SUSE Linux Enterprise High Performance Computing 15-LTSS (SUSE): 3.11.9-5.8.1+8 more productsRed Hat: 1 advisoryRed Hat: 9 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSESUSE Linux Enterprise High Performance Computing 15-ESPOSpcp to before 3.11.9-5.8.13.11.9-5.8.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15-LTSSpcp to before 3.11.9-5.8.13.11.9-5.8.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Development Tools 15pcp to before 3.11.9-5.8.13.11.9-5.8.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Development Tools 15-SP1pcp to before 4.3.1-3.5.34.3.1-3.5.3Patch availableCNA
SUSESUSE Linux Enterprise Module for Open Buildservice Development Tools 15pcp to before 3.11.9-5.8.13.11.9-5.8.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15-LTSSpcp to before 3.11.9-5.8.13.11.9-5.8.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP 15pcp to before 3.11.9-5.8.13.11.9-5.8.1Patch availableCNA
SUSESUSE Linux Enterprise Software Development Kit 12-SP4pcp to before 3.11.9-6.14.13.11.9-6.14.1Patch availableCNA
SUSESUSE Linux Enterprise Software Development Kit 12-SP5pcp to before 3.11.9-6.14.13.11.9-6.14.1Patch availableCNA
openSUSEopenSUSE Leap 15.1pcp to before 4.3.1-lp151.2.3.14.3.1-lp151.2.3.1Patch availableCNA
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS VendorSUSE Affected pcp to before 3.11.9-5.8.1 Fixed in 3.11.9-5.8.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15-LTSS VendorSUSE Affected pcp to before 3.11.9-5.8.1 Fixed in 3.11.9-5.8.1 Patch available CNA
  • SUSE Linux Enterprise Module for Development Tools 15 VendorSUSE Affected pcp to before 3.11.9-5.8.1 Fixed in 3.11.9-5.8.1 Patch available CNA
  • SUSE Linux Enterprise Module for Development Tools 15-SP1 VendorSUSE Affected pcp to before 4.3.1-3.5.3 Fixed in 4.3.1-3.5.3 Patch available CNA
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 VendorSUSE Affected pcp to before 3.11.9-5.8.1 Fixed in 3.11.9-5.8.1 Patch available CNA
  • SUSE Linux Enterprise Server 15-LTSS VendorSUSE Affected pcp to before 3.11.9-5.8.1 Fixed in 3.11.9-5.8.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP 15 VendorSUSE Affected pcp to before 3.11.9-5.8.1 Fixed in 3.11.9-5.8.1 Patch available CNA
  • SUSE Linux Enterprise Software Development Kit 12-SP4 VendorSUSE Affected pcp to before 3.11.9-6.14.1 Fixed in 3.11.9-6.14.1 Patch available CNA
  • SUSE Linux Enterprise Software Development Kit 12-SP5 VendorSUSE Affected pcp to before 3.11.9-6.14.1 Fixed in 3.11.9-6.14.1 Patch available CNA
  • openSUSE Leap 15.1 VendoropenSUSE Affected pcp to before 4.3.1-lp151.2.3.1 Fixed in 4.3.1-lp151.2.3.1 Patch available CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:*before 3.11.9-5.8.1VulnerableopenSUSE
cpe:2.3:a:suse:linux_enterprise_high_performance_computing:15.0:*:*:*:espos:*:*:*15.0Running onSUSE
cpe:2.3:a:suse:linux_enterprise_high_performance_computing:15.0:*:*:*:ltss:*:*:*15.0Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:*15Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:ltss:*:*15Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*15Running onSUSE
cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:*before 4.3.1-3.5.3VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:*:*:*:*15 sp1Running onSUSE
cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:*before 3.11.9-6.14.1VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp4:*:*:*:*:*:*12 sp4Running onSUSE
  • cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:* Versions before 3.11.9-5.8.1 Vulnerable ·openSUSE
  • cpe:2.3:a:suse:linux_enterprise_high_performance_computing:15.0:*:*:*:espos:*:*:* Versions 15.0 Running on ·SUSE
  • cpe:2.3:a:suse:linux_enterprise_high_performance_computing:15.0:*:*:*:ltss:*:*:* Versions 15.0 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:* Versions 15 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:ltss:*:* Versions 15 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:* Versions 15 Running on ·SUSE
  • cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:* Versions before 4.3.1-3.5.3 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:*:*:*:* Versions 15 sp1 Running on ·SUSE
  • cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:* Versions before 3.11.9-6.14.1 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp4:*:*:*:*:*:* Versions 12 sp4 Running on ·SUSE
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp5:*:*:*:*:*:*12 sp5Running onSUSE
cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:*before 4.3.1-lp151.2.3.1VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1Running onopenSUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp5:*:*:*:*:*:* Versions 12 sp5 Running on ·SUSE
  • cpe:2.3:a:opensuse:pcp:*:*:*:*:*:*:*:* Versions before 4.3.1-lp151.2.3.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Running on ·openSUSE

Remediation

  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15-ESPOS (SUSE) Fixed in 3.11.9-5.8.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15-LTSS (SUSE) Fixed in 3.11.9-5.8.1
  • Fix · CNA SUSE Linux Enterprise Module for Development Tools 15 (SUSE) Fixed in 3.11.9-5.8.1
  • Fix · CNA SUSE Linux Enterprise Module for Development Tools 15-SP1 (SUSE) Fixed in 4.3.1-3.5.3
  • Fix · CNA SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (SUSE) Fixed in 3.11.9-5.8.1
  • Fix · CNA SUSE Linux Enterprise Server 15-LTSS (SUSE) Fixed in 3.11.9-5.8.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP 15 (SUSE) Fixed in 3.11.9-5.8.1
  • Fix · CNA SUSE Linux Enterprise Software Development Kit 12-SP4 (SUSE) Fixed in 3.11.9-6.14.1
  • Fix · CNA SUSE Linux Enterprise Software Development Kit 12-SP5 (SUSE) Fixed in 3.11.9-6.14.1
  • Fix · CNA openSUSE Leap 15.1 (openSUSE) Fixed in 4.3.1-lp151.2.3.1

Red Hat 1 advisory

  • RHSA-2020:3869 Released 2020-09-29 · Red Hat rating Low
    pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) pcp-4.3.2-12.el7, pcp-conf-4.3.2-12.el7, pcp-doc-4.3.2-12.el7 +47
    • Red Hat Enterprise Linux Client Optional (v. 7) pcp-devel-4.3.2-12.el7, pcp-export-pcp2elasticsearch-4.3.2-12.el7, pcp-export-pcp2influxdb-4.3.2-12.el7 +41
    • Red Hat Enterprise Linux ComputeNode (v. 7) pcp-4.3.2-12.el7, pcp-conf-4.3.2-12.el7, pcp-doc-4.3.2-12.el7 +47
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) pcp-devel-4.3.2-12.el7, pcp-export-pcp2elasticsearch-4.3.2-12.el7, pcp-export-pcp2influxdb-4.3.2-12.el7 +42
    • Red Hat Enterprise Linux Server (v. 7) pcp-4.3.2-12.el7, pcp-conf-4.3.2-12.el7, pcp-doc-4.3.2-12.el7 +47
    • Red Hat Enterprise Linux Server Optional (v. 7) pcp-devel-4.3.2-12.el7, pcp-devel-4.3.2-12.el7.ppc, pcp-export-pcp2elasticsearch-4.3.2-12.el7 +43
    • Red Hat Enterprise Linux Workstation (v. 7) pcp-4.3.2-12.el7, pcp-conf-4.3.2-12.el7, pcp-doc-4.3.2-12.el7 +47
    • Red Hat Enterprise Linux Workstation Optional (v. 7) pcp-devel-4.3.2-12.el7, pcp-export-pcp2elasticsearch-4.3.2-12.el7, pcp-export-pcp2influxdb-4.3.2-12.el7 +41

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    openSUSE Leap 15.1 4.3.1-lp151.2.3.1

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2019-02718 pcp: Local privilege escalation from user pcp to root through migrate_tempdirsPriority LOW 37
    Show all 2 records →
  • Release ·

    SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS and 7 more products 3.11.9-5.8.1, 3.11.9-6.14.1, 4.3.1-3.5.3

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2019-02718 pcp: Local privilege escalation from user pcp to root through migrate_tempdirsPriority LOW 37
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed—
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:3869
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2020:3869

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3695
  2. 2026-10-03 Alias added: GHSA-3g68-p942-4533

References

Exploit 1

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences