CVE-2019-3698: nagios Link Following
Vulnerability summary
CVE-2019-3698 is a high (CVSS 7.0) Link Following vulnerability in nagios. EPSS estimates a 0.68% chance of exploitation in the next 30 days, higher than 51.6% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 28-02-2020PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA5.7MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:LDiffers
EPSS trend
Probability
0.68%
Chance of exploitation in the next 30 days
Percentile
52%
Versus all other CVEs
30-day change
0.00 pp
From 0.68% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.suse.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Opensuse3 products
- backports_sle15.0:sp1
- factory≥ nagios, ≤ 4.4.5-2.1
- leapEOL15.1
Suse2 products
- suse linux enterprise server 11≥ nagios, ≤ 3.0.6-1.25.36.3.1
- suse linux enterprise server 12≥ nagios, ≤ 3.5.1-5.27
Nagios1 product
- nagios< 3.5.1 | < 3.0.6
3 vendors · 6 products
References
3 links- lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- bugzilla.suse.com/show_bug.cgi?id=1156309X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory