CVE-2020-8019 : A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1; openSUSE Backports SLE-15-SP1, openSUSE Leap 15.1 allowed local attackers controlling the user news to escalate their privileges to root. This issue affects: SUSE Linux Enterprise Debuginfo 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Debuginfo 11-SP4 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Module for Legacy Software 12 syslog-ng versions prior to 3.6.4-12.8.1. SUSE Linux Enterprise Point of Sale 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server 11-SP4-LTSS syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server for SAP 12-SP1 syslog-ng versions prior to 3.6.4-12.8.1. openSUSE Backports SLE-15-SP1 syslog-ng versions prior to 3.19.1-bp151.4.6.1. openSUSE Leap 15.1 syslog-ng versions prior to 3.19.1-lp151.3.6.1.

Published 2020-06-29 12:15:11

Updated 2020-07-09 18:08:50

Source SUSE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-8019

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-8019

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.7	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	2.5	5.2	SUSE
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-8019

CWE-61 UNIX Symbolic Link (Symlink) Following

The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

Assigned by: meissner@suse.de (Primary)

Products affected by CVE-2020-8019

Oneidentity » Syslog-ng
Versions before (<) 3.19.1-lp151.3.6.1
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:*:*:*:*
Matching versions
When used together with: Opensuse » Leap » Version: 15.1
Oneidentity » Syslog-ng
Versions before (<) 3.6.4-12.8.1
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:*:*:*:*
Matching versions
When used together with: Suse » Linux Enterprise Module For Legacy » Version: 12
Oneidentity » Syslog-ng
Versions before (<) 3.19.1-bp151.4.6.1
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:*:*:*:*
Matching versions
When used together with: Opensuse » Backports Sle » Version: 15.0 Update SP1
Oneidentity » Syslog-ng
Versions before (<) 2.0.9-27.34.40.5.1
cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:*:*:*:*
Matching versions
When used together with: Suse » Linux Enterprise Debuginfo » Version: 11 Update SP3

Vulnerability Details : CVE-2020-8019

Exploit prediction scoring system (EPSS) score for CVE-2020-8019

CVSS scores for CVE-2020-8019

CWE ids for CVE-2020-8019

References for CVE-2020-8019

Products affected by CVE-2020-8019