CVE:CVE-2019-3698
CNNVD:CNNVD-202002-1302
Nagios是美国Nagios公司的一套开源的免费网络监视工具。
SUSE Linux Enterprise Server 12版本中的Nagios 3.5.1之前版本和SUSE Linux Enterprise Server 11版本中的Nagios 3.0.6之前版本存在后置链接漏洞。本地攻击者可利用该漏洞导致拒绝服务或提升权限。
solution:Upgrade nagios nagios to a higher version than 3.5.1,3.0.6,and avoid the version (,3.5.1),(,3.0.6); Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1