CVE-2019-3699: Privoxy

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.

Affected products

• Privoxy Privoxy: before 3.0.28-lp151.1.1 (fixed in 3.0.28-lp151.1.1); before 3.0.28-2.1 (fixed in 3.0.28-2.1)

Published 2020-01-24. Last modified 2026-06-17.