CVE-2019-3687: "easy" permission profile allows everyone execute dumpcap and read all network traffic

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-24 · updated 2026-06-17
Weakness: CWE-276

Description

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.

Affected products

SUSE Linux Enterprise Server: all versions

References

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
https://bugzilla.suse.com/show_bug.cgi?id=1148788
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
https://bugzilla.suse.com/show_bug.cgi?id=1148788

Get alerted when CVE-2019-3687 or the next vulnerability affects your stack