CVE-2019-3698
nagios cron job allows privilege escalation from user nagios to root
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
nagios cron job allows privilege escalation from user nagios to root
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
- Record
CVE-2019-3698- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L - Weakness
- CWE-59
- Updated
- 2026-11-02
EUVDEUVD-2019-13333
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
- Record
EUVD-2019-13333- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8m8-7jgv-237q No score
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE...
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
- Record
GHSA-q8m8-7jgv-237q- Weakness
- CWE-59
- Updated
- 2026-11-02
NVD
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
- Record
CVE-2019-3698- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
OSV
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
- Record
CVE-2019-3698- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0500-1 No score
Security update for nagios
This update for nagios to version 4.4.5 fixes the following issues:
- CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. (boo#1156309)
- CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report (boo#1119832)
- CVE-2018-13441, CVE-2018-13458, CVE-2018-13457: Fixed a few denial of service vulnerabilities caused by null pointer dereference (boo#1101293, boo#1101289, boo#1101290).
- Record
openSUSE-SU-2020:0500-1- Updated
- 2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2020:0517-1 No score
Security update for nagios
This update for nagios to version 4.4.5 fixes the following issues:
- CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. (boo#1156309)
- CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report (boo#1119832)
- CVE-2018-13441, CVE-2018-13458, CVE-2018-13457: Fixed a few denial of service vulnerabilities caused by null pointer dereference (boo#1101293, boo#1101289, boo#1101290).
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2020:0517-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11073-1 No score
nagios-4.4.6-2.5 on GA media
These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11073-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3576-1 No score
Security update for icinga
This update for icinga fixes the following issues:
- CVE-2016-9566: Fixed root privilege escalation (bsc#1014637).
- CVE-2019-3698: Fixed symbolic link vulnerability that can cause DoS or potentially escalate privileges (bsc#1156309).
- Record
SUSE-SU-2022:3576-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1629-1 No score
Security update for SUSE Manager Client Tools Beta
This update for SUSE Manager Client Tools Beta fixes the following issues:
- Changed codestream origin of SUSE Manager Client Tools Beta (no source changes)
icinga in SUSE Manager Client Tools Beta also received the following security fixes:
- CVE-2016-9566: Fixed root privilege escalation (bsc#1014637)
- CVE-2019-3698 : Symbolic Link (Symlink) following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges by winning a race (bsc#1156309)
- Record
SUSE-SU-2024:1629-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
icingaSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 1.13.3-12.6.1 | 1.13.3-12.6.1 |
grafana-ha-cluster-dashboardsSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 1.1.0+git.1605027022.a84d536-1.10.1 | 1.1.0+git.1605027022.a84d536-1.10.1 |
grafana-sap-netweaver-dashboardsSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 1.0.3+git.1601889366.9f71957-1.10.1 | 1.0.3+git.1601889366.9f71957-1.10.1 |
grafana-sap-providersSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 1.1-1.7.1 | 1.1-1.7.1 |
hwdataSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 0.314-10.14.1 | 0.314-10.14.1 |
icingaSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 1.13.3-12.8.1 | 1.13.3-12.8.1 |
sysuser-toolsSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 2.0-1.9.1 | 2.0-1.9.1 |
zeromqSUSE:Manager Client Tools 12 From an advisory covering 2 CVEs |
before 4.0.4-15.8.1 | 4.0.4-15.8.1 |
grafana-ha-cluster-dashboardsSUSE:Manager Client Tools 12-BETA From an advisory covering 2 CVEs |
before 1.1.0+git.1605027022.a84d536-1.10.1 | 1.1.0+git.1605027022.a84d536-1.10.1 |
grafana-sap-netweaver-dashboardsSUSE:Manager Client Tools 12-BETA From an advisory covering 2 CVEs |
before 1.0.3+git.1601889366.9f71957-1.10.1 | 1.0.3+git.1601889366.9f71957-1.10.1 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
grafana-sap-providersSUSE:Manager Client Tools 12-BETA From an advisory covering 2 CVEs |
before 1.1-1.7.1 | 1.1-1.7.1 |
icingaSUSE:Manager Client Tools 12-BETA From an advisory covering 2 CVEs |
before 1.13.3-12.8.1 | 1.13.3-12.8.1 |
sysuser-toolsSUSE:Manager Client Tools 12-BETA From an advisory covering 2 CVEs |
before 2.0-1.9.1 | 2.0-1.9.1 |
zeromqSUSE:Manager Client Tools 12-BETA From an advisory covering 2 CVEs |
before 4.0.4-15.8.1 | 4.0.4-15.8.1 |
zeromqSUSE:Linux Enterprise Module for Advanced Systems Management 12 From an advisory covering 2 CVEs |
before 4.0.4-15.8.1 | 4.0.4-15.8.1 |
sysuser-toolsSUSE:Linux Enterprise Module for Containers 12 From an advisory covering 2 CVEs |
before 2.0-1.9.1 | 2.0-1.9.1 |
zeromqSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 4.0.4-15.8.1 | 4.0.4-15.8.1 |
sysuser-toolsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 2.0-1.9.1 | 2.0-1.9.1 |
sysuser-toolsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 2.0-1.9.1 | 2.0-1.9.1 |
zeromqSUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 2 CVEs |
before 4.0.4-15.8.1 | 4.0.4-15.8.1 |
nagiosopenSUSE:Leap 15.1 From an advisory covering 5 CVEs |
before 4.4.5-lp151.5.4.1 | 4.4.5-lp151.5.4.1 |
nagiosSUSE:Package Hub 15 SP1 From an advisory covering 5 CVEs |
before 4.4.5-bp151.4.3.1 | 4.4.5-bp151.4.3.1 |
nagiosopenSUSE:Tumbleweed From an advisory covering 17 CVEs |
before 4.4.6-2.5 | 4.4.6-2.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-3698 is a medium vulnerability (CVSS 5.7) in Nagios, published February 28, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.68%, the 52nd percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html
bugzilla.suse.com/show_bug.cgi?id=1156309
nvd.nist.gov/vuln/detail/CVE-2019-3698
github.com/advisories/GHSA-q8m8-7jgv-237q
suse.com/support/update/announcement/2022/suse-su-20223576-1
Show 26 moreShow less