{"id":"CVE-2019-3689","aliases":["DEBIAN-CVE-2019-3689","DLA-1965-1","EUVD-2019-13324","GHSA-qh2q-m44h-cfm8","SUSE-SU-2019:2771-1","SUSE-SU-2019:2776-1","SUSE-SU-2019:2781-1","SUSE-SU-2019:2782-1","UBUNTU-CVE-2019-3689","USN-4400-1","openSUSE-SU-2019:2408-1","openSUSE-SU-2019:2435-1","openSUSE-SU-2024:11090-1","openSUSE-SU-2024:11307-1"],"status":"published","title":"nfs-utils: root-owned files stored in insecure /var/lib/nfs directory","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01518,"percentile":0.74727,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2019-09-19T13:27:58Z","modified":"2026-09-21T07:03:18Z","fixes":[{"ecosystem":"Debian:12","package":"nfs-utils","fixed_in":["1:1.3.4-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nfs-utils","fixed_in":["1:1.3.4-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nfs-utils","fixed_in":["1:1.3.4-3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"nfs-utils","fixed_in":["1:1.2.8-9+deb8u1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"nfs-utils","fixed_in":["1.3.0-41.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"nfs-utils","fixed_in":["1.3.0-41.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"nfs-utils","fixed_in":["2.1.1-6.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"nfs-utils","fixed_in":["1.3.0-34.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"nfs-utils","fixed_in":["2.1.1-10.4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nfs-utils","fixed_in":["1:1.2.8-9ubuntu12.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nfs-utils","fixed_in":["1:1.3.4-2.1ubuntu5.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nfs-utils","fixed_in":["1:1.3.4-2.5ubuntu3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"nfs-utils","fixed_in":["2.1.1-lp150.4.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"nfs-utils","fixed_in":["2.1.1-lp151.7.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"nfsidmap","fixed_in":["1.0-26.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rpmlint","fixed_in":["2.1+git20210924.ad0cf53-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8-9+deb8u1"}]}],"versions":["1:1.2.8-9"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-41.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-41.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-6.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-34.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-10.4.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.8-2ubuntu2","1:1.2.8-4ubuntu1","1:1.2.8-5ubuntu1","1:1.2.8-6ubuntu1","1:1.2.8-6ubuntu1.1","1:1.2.8-6ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8-9ubuntu12.3"}]}],"versions":["1:1.2.8-9ubuntu10","1:1.2.8-9ubuntu11","1:1.2.8-9ubuntu12","1:1.2.8-9ubuntu12.1","1:1.2.8-9ubuntu12.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-2.1ubuntu5.3"}]}],"versions":["1:1.3.4-2.1ubuntu2","1:1.3.4-2.1ubuntu4","1:1.3.4-2.1ubuntu5","1:1.3.4-2.1ubuntu5.1","1:1.3.4-2.1ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-2.5ubuntu3.3"}]}],"versions":["1:1.3.4-2.5ubuntu2","1:1.3.4-2.5ubuntu3","1:1.3.4-2.5ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8-9ubuntu12.3"}]}],"versions":["1:1.2.8-9ubuntu10","1:1.2.8-9ubuntu11","1:1.2.8-9ubuntu12","1:1.2.8-9ubuntu12.1","1:1.2.8-9ubuntu12.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-2.1ubuntu5.3"}]}],"versions":["1:1.3.4-2.1ubuntu2","1:1.3.4-2.1ubuntu4","1:1.3.4-2.1ubuntu5","1:1.3.4-2.1ubuntu5.1","1:1.3.4-2.1ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.4-2.5ubuntu3.3"}]}],"versions":["1:1.3.4-2.5ubuntu2","1:1.3.4-2.5ubuntu3","1:1.3.4-2.5ubuntu3.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-lp150.4.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"nfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-lp151.7.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nfsidmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-26.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rpmlint","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1+git20210924.ad0cf53-1.1"}]}]}],"products":[{"vendor":"linux-nfs","product":"nfs-utils"},{"vendor":"suse","product":"suse linux enterprise server 12"},{"vendor":"suse","product":"suse linux enterprise server 15"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1150733","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00026.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00071.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory","advisory"]},{"url":"https://git.linux-nfs.org/?p=steved/nfs-utils.git%3Ba=commitdiff%3Bh=fee2cc29e888f2ced6a76990923aef19d326dc0e","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4400-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3689"},{"url":"https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commitdiff;h=fee2cc29e888f2ced6a76990923aef19d326dc0e"},{"url":"https://github.com/advisories/GHSA-qh2q-m44h-cfm8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3689","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192771-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1150733","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3689","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192776-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192781-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192782-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-3689","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4400-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3689","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DANISIKC2QA3XUD5Y4QUCFZE65LVNFWA/#DANISIKC2QA3XUD5Y4QUCFZE65LVNFWA","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VRJ4FZYKCXQJYYW2SHUMRX7O3BYNNLH2/#VRJ4FZYKCXQJYYW2SHUMRX7O3BYNNLH2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-3689","title":"nfs-utils: root-owned files stored in insecure /var/lib/nfs directory","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","status":"published","published":"2019-09-19T13:27:58.449Z","modified":"2024-09-17T04:14:20.947Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13324","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","status":"published","published":"2019-09-19T13:27:58Z","modified":"2024-09-17T04:14:20Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:28:24.821388Z"}],"ghsa":[{"id":"GHSA-qh2q-m44h-cfm8","title":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18...","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system if fs.protected_symlinks is not set","status":"published","published":"2022-05-24T16:56:30Z","modified":"2023-01-28T05:07:14Z","cwes":["CWE-276"],"updated_at":"2026-11-02T14:44:30.20469Z"}],"nvd":[{"id":"CVE-2019-3689","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","status":"published","published":"2019-09-19T14:15:10.65Z","modified":"2026-06-17T02:35:23.19Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:05:28.126831Z"}],"osv":[{"id":"CVE-2019-3689","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","status":"published","published":"2019-09-19T14:15:10.65Z","modified":"2026-03-15T22:31:35.425931Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3689","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","status":"published","published":"2019-09-19T14:15:10.65Z","modified":"2026-09-21T07:03:18.417594403Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"UBUNTU-CVE-2019-3689","description":"The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.","status":"published","published":"2019-09-19T14:15:00Z","modified":"2026-02-04T02:23:52.24349Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"DLA-1965-1","title":"nfs-utils - security update","status":"published","published":"2019-10-19T00:00:00Z","modified":"2026-03-09T01:22:15.841037Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"openSUSE-SU-2019:2408-1","title":"Security update for nfs-utils","description":"This update for nfs-utils fixes the following issues:\n\n- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-29T15:27:20Z","modified":"2026-02-04T02:40:11.465292Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2435-1","title":"Security update for nfs-utils","description":"This update for nfs-utils fixes the following issues:\n\n- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-11-05T15:30:45Z","modified":"2026-02-04T02:38:17.406196Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11090-1","title":"libnfsidmap1-1.0-26.2 on GA media","description":"These are all security issues fixed in the libnfsidmap1-1.0-26.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:40:26.534816Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11307-1","title":"rpmlint-2.1+git20210924.ad0cf53-1.1 on GA media","description":"These are all security issues fixed in the rpmlint-2.1+git20210924.ad0cf53-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:08:31.224347Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:2771-1","title":"Security update for nfs-utils","description":"This update for nfs-utils fixes the following issues:\n\n- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)\n","status":"published","published":"2019-10-24T11:48:59Z","modified":"2026-02-04T02:16:42.713148Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2776-1","title":"Security update for nfs-utils","description":"This update for nfs-utils fixes the following issues:\n\n- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)\n","status":"published","published":"2019-10-24T13:55:22Z","modified":"2026-02-04T03:46:46.435724Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2781-1","title":"Security update for nfs-utils","description":"This update for nfs-utils fixes the following issues:\n\n- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)\n","status":"published","published":"2019-10-25T12:27:43Z","modified":"2026-02-04T04:18:19.456014Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2782-1","title":"Security update for nfs-utils","description":"This update for nfs-utils fixes the following issues:\n\n- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)\n","status":"published","published":"2019-10-25T12:27:54Z","modified":"2026-02-04T02:34:12.109144Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4400-1","title":"nfs-utils vulnerability","description":"It was discovered that the nfs-utils package set incorrect permissions on\nthe /var/lib/nfs directory. An attacker could possibly use this issue to\nescalate privileges.\n","status":"published","published":"2020-06-22T13:35:05Z","modified":"2026-04-27T18:46:23.186828Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}