CVE-2019-3698

HIGH 7.0CVE-2019-3698 · Published 28/02/2020 · updated 17/06/2026

In short

CVE-2019-3698 is a HIGH (CVSS 7.0) vulnerability affecting nagios (nagios), backports sle (opensuse).
Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.6% of all vulnerabilities.
Fix: update to 3.0.6, 3.5.1 or later.

Package	Affected versions	Patched versions
nagios nagios	`< 3.0.6< 3.5.1`	`3.0.63.5.1`
backports sle opensuse	`= 15.0`	No fix yet

Description

UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.

References

lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html · Mailing List
bugzilla.suse.com/show_bug.cgi · Exploit

More vulnerabilities in nagios

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nagios

< 3.0.6< 3.5.1

3.0.63.5.1

backports sle

opensuse

= 15.0

No fix yet

Description

More vulnerabilities in nagios

See all →