Vulnerabilities > CVE-2019-18899

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

local

low complexity

apt-cacher-ng-project

opensuse

nessus

NVD

Published: 2020-01-23

Updated: 2024-11-21

Summary

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.

Vulnerable Configurations

Part	Description	Count
Application	Apt-Cacher-Ng_Project APT Cacher NG Project APT Cacher NG - APT Cacher NG Project APT Cacher NG 0.7.26 APT Cacher NG Project APT Cacher NG 0.7.26-1 APT Cacher NG Project APT Cacher NG 0.7.26-2 APT Cacher NG Project APT Cacher NG 0.7.27 APT Cacher NG Project APT Cacher NG 0.7.27-1 APT Cacher NG Project APT Cacher NG 0.8.0 APT Cacher NG Project APT Cacher NG 0.8.0-1 APT Cacher NG Project APT Cacher NG 0.8.0-2 APT Cacher NG Project APT Cacher NG 0.8.0-3 APT Cacher NG Project APT Cacher NG 0.8.1 APT Cacher NG Project APT Cacher NG 0.8.1-1 APT Cacher NG Project APT Cacher NG 0.8.2 APT Cacher NG Project APT Cacher NG 0.8.2-1 APT Cacher NG Project APT Cacher NG 0.8.3 APT Cacher NG Project APT Cacher NG 0.8.3-1 APT Cacher NG Project APT Cacher NG 0.8.4 APT Cacher NG Project APT Cacher NG 0.8.4-1 APT Cacher NG Project APT Cacher NG 0.8.5 APT Cacher NG Project APT Cacher NG 0.8.5-1 APT Cacher NG Project APT Cacher NG 0.8.5-2 APT Cacher NG Project APT Cacher NG 0.8.6 APT Cacher NG Project APT Cacher NG 0.8.6-1 APT Cacher NG Project APT Cacher NG 0.8.7 APT Cacher NG Project APT Cacher NG 0.8.7-1 APT Cacher NG Project APT Cacher NG 0.8.8 APT Cacher NG Project APT Cacher NG 0.8.8-1 APT Cacher NG Project APT Cacher NG 0.8.9 APT Cacher NG Project APT Cacher NG 0.8.9-1 APT Cacher NG Project APT Cacher NG 0.9.0 APT Cacher NG Project APT Cacher NG 0.9.0-1 APT Cacher NG Project APT Cacher NG 0.9.1 APT Cacher NG Project APT Cacher NG 0.9.1-1 APT Cacher NG Project APT Cacher NG 0.9.2 APT Cacher NG Project APT Cacher NG 0.9.2-1 APT Cacher NG Project APT Cacher NG 0.9.3 APT Cacher NG Project APT Cacher NG 0.9.3-1 APT Cacher NG Project APT Cacher NG 0.9.3.1 APT Cacher NG Project APT Cacher NG 0.9.3.1-1 APT Cacher NG Project APT Cacher NG 0.9.3.2 APT Cacher NG Project APT Cacher NG 0.9.3.2-1 APT Cacher NG Project APT Cacher NG 1 APT Cacher NG Project APT Cacher NG 1-2 APT Cacher NG Project APT Cacher NG 2 APT Cacher NG Project APT Cacher NG 2-1 APT Cacher NG Project APT Cacher NG 2-2 APT Cacher NG Project APT Cacher NG 3 APT Cacher NG Project APT Cacher NG 3-1 APT Cacher NG Project APT Cacher NG 3-2 APT Cacher NG Project APT Cacher NG 3-3 APT Cacher NG Project APT Cacher NG 3-4 APT Cacher NG Project APT Cacher NG 3-5 APT Cacher NG Project APT Cacher NG 3.1 APT Cacher NG Project APT Cacher NG 3.1-1	65
OS	Opensuse Opensuse Leap 15.1 Opensuse Backports Sle-15	2

Nessus

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2020-124.NASL
description	This update for apt-cacher-ng fixes the following issues : - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703). - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 (boo#1157706).
last seen	2020-06-01
modified	2020-06-02
plugin id	133345
published	2020-01-30
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133345
title	openSUSE Security Update : apt-cacher-ng (openSUSE-2020-124)

Vulnerabilities > CVE-2019-18899 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2019-18899"}]}

Summary

Vulnerable Configurations

Nessus

References

Vulnerabilities > CVE-2019-18899