CVE-2019-18901 json
mysql-systemd-helper allows setting 640 permissions of arbitrary files
published 2020-03-02 6 y ago modified 2026-06-17 4 mo ago also EUVD-2019-8582
- cvss
- 5.1
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 32%
- public exploits
- 0
- none known
Summary
A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.
Patch / fix
- SUSE SUSE Linux Enterprise Server 12 10.2.31-3.25.1
- SUSE SUSE Linux Enterprise Server 15 10.2.31-3.26.1
- mariadb104 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 10.4.30-8.5.46
- lz4 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.8.0-3.5.2
- python-mysqlclient SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.3.14-8.9.2
- mariadb-connector-c SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 3.1.22-2.35.1
- mariadb OpenStack Cloud 7 10.2.31-16.1
- mariadb OpenStack Cloud Crowbar 8, OpenStack Cloud 8, HPE Helion OpenStack 8 10.2.31-4.17.3
- ardana-mq OpenStack Cloud 8, HPE Helion OpenStack 8 8.0+git.1581024906.fbf0be3-3.16.3
- crowbar-ha OpenStack Cloud Crowbar 8 5.0+git.1574286229.e0364c3-3.29.3
suse advisories SUSE-RU-2023:4991-1SUSE-RU-2023:3956-1SUSE-SU-2020:0831-1SUSE-SU-2020:0640-1SUSE-SU-2020:0527-1SUSE-SU-2020:0505-1
- mariadb openSUSE Tumbleweed 10.6.4-2.1
- mariadb openSUSE Leap 15.1 10.2.31-lp151.2.12.1
opensuse advisories openSUSE-SU-2024:11038-1openSUSE-SU-2020:0289-1
Exploit prediction
0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 5.1 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Affected products
- SUSE SUSE Linux Enterprise Server 12
- SUSE SUSE Linux Enterprise Server 15
Classification
- Weakness
-
- CWE-59 Improper Link Resolution Before File Access
References
-
lists.opensuse.org
/opensuse-security-announce/2020-03/msg00007.html
vendor-advisory, broken-link, mailing-list
-
bugzilla.suse.com
/show_bug.cgi?id=1160895
issue-tracking, vendor-advisory
Sources
- CVE List CVE-2019-18901
- NVD CVE-2019-18901
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.