CVE:CVE-2019-3749
CNNVD:CNNVD-201912-148
Dell Command Update是美国戴尔（Dell）公司的一款用于在Dell产品中自动更新驱动程序、BIOS和固件的工具。
Dell Command Update 3.1之前版本中存在安全漏洞。本地攻击者可通过创建符号链接利用该漏洞删除任意文件。
solution:Upgrade dell command_update to a higher version than 3.1,and avoid the version (,3.1)
solution:Upgrade suse inn to a higher version than 2.4.2-170.21.3.1,2.6.2-2.2,2.5.4-lp151.2.47,and avoid the version (,2.4.2-170.21.3.1],(,2.6.2-2.2],(,2.5.4-lp151.2.47]; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1