nagios cron job allows privilege escalation from user nagios to root
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 12 | nagios – 3.5.1-5.27 | — | No fix listed | CNA |
| SUSE | SUSE Linux Enterprise Server 11 | nagios – 3.0.6-1.25.36.3.1 | — | No fix listed | CNA |
| openSUSE | Factory | nagios – 4.4.5-2.1 | — | No fix listed | CNA |
- SUSE Linux Enterprise Server 12 VendorSUSE Affected nagios – 3.5.1-5.27 Fixed in — No fix listed CNA
- SUSE Linux Enterprise Server 11 VendorSUSE Affected nagios – 3.0.6-1.25.36.3.1 Fixed in — No fix listed CNA
- Factory VendoropenSUSE Affected nagios – 4.4.5-2.1 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:* | before 3.5.1 | Vulnerable | Nagios |
| cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* | 12 | Running on | SUSE |
| cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:* | before 3.0.6 | Vulnerable | Nagios |
| cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* | 11 | Running on | SUSE |
| cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* | 15.0 sp1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* | 15.1 | Vulnerable | openSUSE |
- cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:* Versions before 3.5.1 Vulnerable ·Nagios
- cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* Versions 12 Running on ·SUSE
- cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:* Versions before 3.0.6 Vulnerable ·Nagios
- cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* Versions 11 Running on ·SUSE
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* Versions 15.0 sp1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-3698
- 2026-10-03 Alias added: GHSA-q8m8-7jgv-237q
References
More SUSE vulnerabilities
- TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
- TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
- TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2019-3698 · CVE Program
- CVE-2019-3698 · NVD
- FIRST EPSS
- GHSA-q8m8-7jgv-237q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences