CVE catalog

CVE-2019-3688

squid: CVE-2019-3688

[CVE catalog]

Severity
Medium · CVSS 5.1CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.34% · Oct 25, 2026

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansquidsid7.7-1not affected
Debiansquidforky7.7-1not affected
Debiansquidtrixie6.13-2+deb13u3not affected
Debiansquidtrixie-security6.13-2+deb13u2not affected
Debiansquidbookworm5.7-2+deb12u5not affected
Debiansquidbookworm-security5.7-2+deb12u6not affected
Susepermissionslinux enterprise module for basesystem 1520180125-3.18.1fixed
Susepermissionslinux enterprise high performance computing 15-espos20180125-3.21.1fixed
Susepermissionslinux enterprise high performance computing 15-ltss20180125-3.21.1fixed
Susepermissionslinux enterprise server 15-ltss20180125-3.21.1fixed
Susepermissionslinux enterprise server for sap applications 1520180125-3.21.1fixed
Susepermissionslinux enterprise desktop 12 sp420170707-3.14.1fixed
Susepermissionslinux enterprise server 12 sp420170707-3.14.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp420170707-3.14.1fixed
Susepermissionslinux enterprise server 12 sp520170707-3.14.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp520170707-3.14.1fixed
Opensusepermissionsleap 15.320200127-lp153.24.3.1fixed
Susepermissionslinux enterprise server 12 sp520170707-6.4.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp520170707-6.4.1fixed
Opensusepermissionsleap 15.120181116-lp151.4.9.1fixed
Opensusepermissionstumbleweed1550_20210901.1550-29.2fixed
Susepermissionshpe helion openstack 82015.09.28.1626-17.20.1fixed
Susepermissionsopenstack cloud 72015.09.28.1626-17.20.1fixed
Susepermissionsopenstack cloud 82015.09.28.1626-17.20.1fixed
Susepermissionsopenstack cloud crowbar 82015.09.28.1626-17.20.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp22015.09.28.1626-17.20.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp32015.09.28.1626-17.20.1fixed
Susepermissionslinux enterprise server 12 sp2-ltss2015.09.28.1626-17.20.1fixed
Susepermissionslinux enterprise server 12 sp2-bcl2015.09.28.1626-17.20.1fixed
Susepermissionslinux enterprise server 12 sp3-ltss2015.09.28.1626-17.20.1fixed
Susepermissionslinux enterprise server 12 sp3-bcl2015.09.28.1626-17.20.1fixed
Susepermissionsenterprise storage 52015.09.28.1626-17.20.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiansquidsourcesidNot affectedunimportantNot reportedNot reported
DebiansquidsourceforkyNot affectedunimportantNot reportedNot reported
DebiansquidsourcetrixieNot affectedunimportantNot reportedNot reported
DebiansquidsourcebookwormNot affectedunimportantNot reportedNot reported
Susepermissionsrpmlinux enterprise module for basesystem 1520180125-3.18.1Not reportedSUSE-SU-2019:3182-1Not reported
Susepermissionsrpmlinux enterprise high performance computing 15-espos20180125-3.21.1Not reportedSUSE-SU-2020:1163-1Not reported
Susepermissionsrpmlinux enterprise high performance computing 15-ltss20180125-3.21.1Not reportedSUSE-SU-2020:1163-1Not reported
Susepermissionsrpmlinux enterprise server 15-ltss20180125-3.21.1Not reportedSUSE-SU-2020:1163-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 1520180125-3.21.1Not reportedSUSE-SU-2020:1163-1Not reported
Susepermissionsrpmlinux enterprise desktop 12 sp420170707-3.14.1Not reportedSUSE-SU-2019:3183-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp420170707-3.14.1Not reportedSUSE-SU-2019:3183-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp420170707-3.14.1Not reportedSUSE-SU-2019:3183-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp520170707-3.14.1Not reportedSUSE-SU-2019:3183-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp520170707-3.14.1Not reportedSUSE-SU-2019:3183-1Not reported
Opensusepermissionsrpmleap 15.320200127-lp153.24.3.1Not reportedOPENSUSE-SU-2021:1520-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp520170707-6.4.1Not reportedSUSE-SU-2021:2280-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp520170707-6.4.1Not reportedSUSE-SU-2021:2280-1Not reported
Opensusepermissionsrpmleap 15.120181116-lp151.4.9.1Not reportedOPENSUSE-SU-2019:2672-1Not reported
Opensusepermissionsrpmtumbleweed1550_20210901.1550-29.2Not reportedOPENSUSE-SU-2024:11165-1Not reported
Susepermissionsrpmhpe helion openstack 82015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmopenstack cloud 72015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmopenstack cloud 82015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmopenstack cloud crowbar 82015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp22015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp32015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp2-ltss2015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp2-bcl2015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp3-ltss2015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp3-bcl2015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported
Susepermissionsrpmenterprise storage 52015.09.28.1626-17.20.1Not reportedSUSE-SU-2019:3180-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [squid]Unknown
    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u5 · arm64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

  • [squid-cgi]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u5 · arm64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

  • [squidclient]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u5 · arm64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

  • [squid-common]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · all · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u5 · all · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · all · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · all · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

  • [squid-openssl]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u5 · arm64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

  • [squid-purge]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u5 · arm64 · bookworm

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Not affected

      dsa · squid · debian · bookworm

[openSUSE Tumbleweed]

  • [permctl]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1550_20210901.1550-29.2

      Version impact unknown

      dsa · permissions · opensuse · tumbleweed

  • [permissions]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1550_20210901.1550-29.2

      dsa · permissions · opensuse · tumbleweed

  • [permissions-config]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1550_20210901.1550-29.2

      Version impact unknown

      dsa · permissions · opensuse · tumbleweed

  • [permissions-zypp-plugin]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1550_20210901.1550-29.2

      Version impact unknown

      dsa · permissions · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]