{"id":"CVE-2019-18899","aliases":["EUVD-2019-8580","GHSA-fv3j-23hh-g3xf","UBUNTU-CVE-2019-18899","openSUSE-SU-2020:0124-1","openSUSE-SU-2020:0146-1"],"status":"published","title":"apt-cacher-ng insecure use of /run/apt-cacher-ng","description":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00264,"percentile":0.18309,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269","CWE-732"],"published":"2020-01-23T15:00:20Z","modified":"2026-06-17T02:25:32Z","affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"apt-cacher-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-lp151.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"apt-cacher-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-bp151.4.3.1"}]}],"bundled":2}],"products":[{"vendor":"apt-cacher-ng_project","product":"apt-cacher-ng"},{"vendor":"opensuse","product":"backports"},{"vendor":"opensuse","product":"leap 15.1"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00057.html","tags":["vendor-advisory","x_transferred","Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00065.html","tags":["vendor-advisory","x_transferred","Mailing List","Vendor Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1157703","tags":["x_transferred","Issue Tracking","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18899"},{"url":"https://github.com/advisories/GHSA-fv3j-23hh-g3xf"},{"url":"https://ubuntu.com/security/CVE-2019-18899","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/01/20/5","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18899","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L5YHDY4KQ2XQQ6FVEBGPECNI4RJRU3NR/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157703","tags":["report"]},{"url":"https://bugzilla.suse.com/1157706","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-5202","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WNHKIYENNBZYQZDAXUMNWHSYC2SN5WOD/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-18899","title":"apt-cacher-ng insecure use of /run/apt-cacher-ng","description":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.","status":"published","published":"2020-01-23T15:00:20.234Z","modified":"2024-09-17T01:25:34.093Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8580","description":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.","status":"published","published":"2020-01-23T15:00:20Z","modified":"2024-09-17T01:25:34Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:28:50.234993Z"}],"ghsa":[{"id":"GHSA-fv3j-23hh-g3xf","title":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt...","description":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.","status":"published","published":"2022-05-24T17:07:12Z","modified":"2023-01-27T05:02:34Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-269","CWE-732"],"updated_at":"2026-11-02T14:42:04.146384Z"}],"nvd":[{"id":"CVE-2019-18899","description":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.","status":"published","published":"2020-01-23T15:15:13.6Z","modified":"2026-06-17T02:25:32.893Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"UBUNTU-CVE-2019-18899","description":"The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.","status":"withdrawn","published":"2020-01-23T15:15:00Z","modified":"2025-07-08T14:32:19.415509Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"openSUSE-SU-2020:0124-1","title":"Security update for apt-cacher-ng","description":"This update for apt-cacher-ng fixes the following issues:\n\n- CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703).\n- CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 (boo#1157706).\n","status":"published","published":"2020-01-29T05:11:41Z","modified":"2026-02-04T02:28:20.631062Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0146-1","title":"Security update for apt-cacher-ng","description":"This update for apt-cacher-ng fixes the following issues:\n\n- CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703).\n- CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 (boo#1157706).\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-01-29T16:50:27Z","modified":"2026-02-04T03:43:23.734588Z","updated_at":"2026-11-02T16:58:31.152112Z"}]}}