CVE-2019-3697

7.8 highEPSS 0.5%

High (7.8). EPSS 0.5% chance of exploitation in the next 30 days.

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2020-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gnu:gnump3d
opensuse:leap

References

https://bugzilla.suse.com/show_bug.cgi?id=1154229
https://bugzilla.suse.com/show_bug.cgi?id=1154229

Check your stack JSON