CVE:CVE-2019-3694
CNNVD:CNNVD-202001-1080
openSUSE是德国SUSE公司的一套基于Linux的自由操作系统与开源社区项目。
openSUSE Factory中的munin 2.0.49-4.2及之前版本和openSUSE Leap 15.1版本中的munin 2.0.40-lp151.1.1及之前版本存在后置链接漏洞。本地攻击者可利用该漏洞提升权限至root。
solution:Upgrade opensuse munin to a higher version than 2.0.49-4.2,and avoid the version (,2.0.49-4.2]; Upgrade suse munin to a higher version than 2.0.40-lp151.1.1,and avoid the version (,2.0.40-lp151.1.1]