Medium severity5.7NVD Advisory· Published Feb 28, 2020· Updated Jun 17, 2026
CVE-2019-3698
CVE-2019-3698
Description
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
27- osv-coords22 versionspkg:rpm/opensuse/nagios&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/nagios&distro=openSUSE%20Tumbleweedpkg:rpm/suse/grafana-ha-cluster-dashboards&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/grafana-ha-cluster-dashboards&distro=SUSE%20Manager%20Client%20Tools%2012-BETApkg:rpm/suse/grafana-sap-netweaver-dashboards&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/grafana-sap-netweaver-dashboards&distro=SUSE%20Manager%20Client%20Tools%2012-BETApkg:rpm/suse/grafana-sap-providers&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/grafana-sap-providers&distro=SUSE%20Manager%20Client%20Tools%2012-BETApkg:rpm/suse/hwdata&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/icinga&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/icinga&distro=SUSE%20Manager%20Client%20Tools%2012-BETApkg:rpm/suse/nagios&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/sysuser-tools&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012pkg:rpm/suse/sysuser-tools&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/sysuser-tools&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/sysuser-tools&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/sysuser-tools&distro=SUSE%20Manager%20Client%20Tools%2012-BETApkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012pkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/zeromq&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5pkg:rpm/suse/zeromq&distro=SUSE%20Manager%20Client%20Tools%2012pkg:rpm/suse/zeromq&distro=SUSE%20Manager%20Client%20Tools%2012-BETA
< 4.4.5-lp151.5.4.1+ 21 more
- (no CPE)range: < 4.4.5-lp151.5.4.1
- (no CPE)range: < 4.4.6-2.5
- (no CPE)range: < 1.1.0+git.1605027022.a84d536-1.10.1
- (no CPE)range: < 1.1.0+git.1605027022.a84d536-1.10.1
- (no CPE)range: < 1.0.3+git.1601889366.9f71957-1.10.1
- (no CPE)range: < 1.0.3+git.1601889366.9f71957-1.10.1
- (no CPE)range: < 1.1-1.7.1
- (no CPE)range: < 1.1-1.7.1
- (no CPE)range: < 0.314-10.14.1
- (no CPE)range: < 1.13.3-12.6.1
- (no CPE)range: < 1.13.3-12.8.1
- (no CPE)range: < 4.4.5-bp151.4.3.1
- (no CPE)range: < 2.0-1.9.1
- (no CPE)range: < 2.0-1.9.1
- (no CPE)range: < 2.0-1.9.1
- (no CPE)range: < 2.0-1.9.1
- (no CPE)range: < 2.0-1.9.1
- (no CPE)range: < 4.0.4-15.8.1
- (no CPE)range: < 4.0.4-15.8.1
- (no CPE)range: < 4.0.4-15.8.1
- (no CPE)range: < 4.0.4-15.8.1
- (no CPE)range: < 4.0.4-15.8.1
- openSUSE/Factoryv5Range: nagios
nagios+ 1 more
- (no CPE)range: nagios
- (no CPE)range: nagios
Patches
Vulnerability mechanics
References
3- bugzilla.suse.com/show_bug.cginvdExploitIssue TrackingPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.htmlnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.