Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-tpkk-2gpk-yqg9
SummaryThe /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary
Aliases
0
alias CVE-2019-3688
Fixed_packages
0
url pkg:deb/debian/squid@0?distro=trixie
purl pkg:deb/debian/squid@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@0%3Fdistro=trixie
1
url pkg:deb/debian/squid@4.13-10%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/squid@4.13-10%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5tpw-u7cg-hqd7
1
vulnerability VCID-7sua-wuyu-cqby
2
vulnerability VCID-pshb-b8z8-gqhm
3
vulnerability VCID-qyjc-znbd-dub6
4
vulnerability VCID-rv56-tjvg-bbbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@4.13-10%252Bdeb11u3%3Fdistro=trixie
2
url pkg:deb/debian/squid@5.7-2%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/squid@5.7-2%2Bdeb12u5?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5tpw-u7cg-hqd7
1
vulnerability VCID-7sua-wuyu-cqby
2
vulnerability VCID-pshb-b8z8-gqhm
3
vulnerability VCID-qyjc-znbd-dub6
4
vulnerability VCID-rv56-tjvg-bbbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@5.7-2%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/squid@6.13-2%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/squid@6.13-2%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5tpw-u7cg-hqd7
1
vulnerability VCID-pshb-b8z8-gqhm
2
vulnerability VCID-qyjc-znbd-dub6
3
vulnerability VCID-rv56-tjvg-bbbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@6.13-2%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/squid@7.5-1?distro=trixie
purl pkg:deb/debian/squid@7.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@7.5-1%3Fdistro=trixie
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3688
reference_id
reference_type
scores
0
value 0.00057
scoring_system epss
scoring_elements 0.1803
published_at 2026-06-04T12:55:00Z
1
value 0.00057
scoring_system epss
scoring_elements 0.18111
published_at 2026-06-05T12:55:00Z
2
value 0.00057
scoring_system epss
scoring_elements 0.18113
published_at 2026-06-06T12:55:00Z
3
value 0.00057
scoring_system epss
scoring_elements 0.18074
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3688
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Weaknesses
Exploits
Severity_range_score5.1 - 5.1
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-tpkk-2gpk-yqg9