A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1; openSUSE Backports SLE-15-SP1, openSUSE Leap 15.1 allowed local attackers controlling the user news to escalate their privileges to root. This issue affects: SUSE Linux Enterprise Debuginfo 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Debuginfo 11-SP4 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Module for Legacy Software 12 syslog-ng versions prior to 3.6.4-12.8.1. SUSE Linux Enterprise Point of Sale 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server 11-SP4-LTSS syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server for SAP 12-SP1 syslog-ng versions prior to 3.6.4-12.8.1. openSUSE Backports SLE-15-SP1 syslog-ng versions prior to 3.19.1-bp151.4.6.1. openSUSE Leap 15.1 syslog-ng versions prior to 3.19.1-lp151.3.6.1.

• https://bugzilla.suse.com/show_bug.cgi?id=1169385
• https://bugzilla.suse.com/show_bug.cgi?id=1169385

• Oneidentity » Syslog-Ng » Version: N/A
  cpe:2.3:a:oneidentity:syslog-ng:-
• Oneidentity » Syslog-Ng » Version: 1.4.0
  cpe:2.3:a:oneidentity:syslog-ng:1.4.0
• Oneidentity » Syslog-Ng » Version: 1.4.10
  cpe:2.3:a:oneidentity:syslog-ng:1.4.10
• Oneidentity » Syslog-Ng » Version: 1.4.15
  cpe:2.3:a:oneidentity:syslog-ng:1.4.15
• Oneidentity » Syslog-Ng » Version: 1.4.7
  cpe:2.3:a:oneidentity:syslog-ng:1.4.7
• Oneidentity » Syslog-Ng » Version: 1.4.8
  cpe:2.3:a:oneidentity:syslog-ng:1.4.8
• Oneidentity » Syslog-Ng » Version: 1.4.9
  cpe:2.3:a:oneidentity:syslog-ng:1.4.9
• Oneidentity » Syslog-Ng » Version: 1.5.15
  cpe:2.3:a:oneidentity:syslog-ng:1.5.15
• Oneidentity » Syslog-Ng » Version: 1.5.20
  cpe:2.3:a:oneidentity:syslog-ng:1.5.20
• Oneidentity » Syslog-Ng » Version: 2.0
  cpe:2.3:a:oneidentity:syslog-ng:2.0
• Oneidentity » Syslog-Ng » Version: 2.0.9
  cpe:2.3:a:oneidentity:syslog-ng:2.0.9
• Oneidentity » Syslog-Ng » Version: 2.0.9-27.34.40.5.1
  cpe:2.3:a:oneidentity:syslog-ng:2.0.9-27.34.40.5.1
• Oneidentity » Syslog-Ng » Version: 3.0
  cpe:2.3:a:oneidentity:syslog-ng:3.0
• Oneidentity » Syslog-Ng » Version: 3.0.1
  cpe:2.3:a:oneidentity:syslog-ng:3.0.1
• Oneidentity » Syslog-Ng » Version: 3.0.2
  cpe:2.3:a:oneidentity:syslog-ng:3.0.2
• Oneidentity » Syslog-Ng » Version: 3.0.3
  cpe:2.3:a:oneidentity:syslog-ng:3.0.3
• Oneidentity » Syslog-Ng » Version: 3.0.4
  cpe:2.3:a:oneidentity:syslog-ng:3.0.4
• Oneidentity » Syslog-Ng » Version: 3.0.5
  cpe:2.3:a:oneidentity:syslog-ng:3.0.5
• Oneidentity » Syslog-Ng » Version: 3.0.8
  cpe:2.3:a:oneidentity:syslog-ng:3.0.8
• Oneidentity » Syslog-Ng » Version: 3.1
  cpe:2.3:a:oneidentity:syslog-ng:3.1
• Oneidentity » Syslog-Ng » Version: 3.1.0
  cpe:2.3:a:oneidentity:syslog-ng:3.1.0
• Oneidentity » Syslog-Ng » Version: 3.10.1
  cpe:2.3:a:oneidentity:syslog-ng:3.10.1
• Oneidentity » Syslog-Ng » Version: 3.11.1
  cpe:2.3:a:oneidentity:syslog-ng:3.11.1
• Oneidentity » Syslog-Ng » Version: 3.12.1
  cpe:2.3:a:oneidentity:syslog-ng:3.12.1
• Oneidentity » Syslog-Ng » Version: 3.13.1
  cpe:2.3:a:oneidentity:syslog-ng:3.13.1
• Oneidentity » Syslog-Ng » Version: 3.13.2
  cpe:2.3:a:oneidentity:syslog-ng:3.13.2
• Oneidentity » Syslog-Ng » Version: 3.14.1
  cpe:2.3:a:oneidentity:syslog-ng:3.14.1
• Oneidentity » Syslog-Ng » Version: 3.15.1
  cpe:2.3:a:oneidentity:syslog-ng:3.15.1
• Oneidentity » Syslog-Ng » Version: 3.16.1
  cpe:2.3:a:oneidentity:syslog-ng:3.16.1
• Oneidentity » Syslog-Ng » Version: 3.17.1
  cpe:2.3:a:oneidentity:syslog-ng:3.17.1
• Oneidentity » Syslog-Ng » Version: 3.17.2
  cpe:2.3:a:oneidentity:syslog-ng:3.17.2
• Oneidentity » Syslog-Ng » Version: 3.18.1
  cpe:2.3:a:oneidentity:syslog-ng:3.18.1
• Oneidentity » Syslog-Ng » Version: 3.19.1
  cpe:2.3:a:oneidentity:syslog-ng:3.19.1
• Oneidentity » Syslog-Ng » Version: 3.19.1-bp151.4.6.1
  cpe:2.3:a:oneidentity:syslog-ng:3.19.1-bp151.4.6.1
• Oneidentity » Syslog-Ng » Version: 3.2
  cpe:2.3:a:oneidentity:syslog-ng:3.2
• Oneidentity » Syslog-Ng » Version: 3.2.1
  cpe:2.3:a:oneidentity:syslog-ng:3.2.1
• Oneidentity » Syslog-Ng » Version: 3.2.2
  cpe:2.3:a:oneidentity:syslog-ng:3.2.2
• Oneidentity » Syslog-Ng » Version: 3.2.4
  cpe:2.3:a:oneidentity:syslog-ng:3.2.4
• Oneidentity » Syslog-Ng » Version: 3.3.0
  cpe:2.3:a:oneidentity:syslog-ng:3.3.0
• Oneidentity » Syslog-Ng » Version: 3.3.1
  cpe:2.3:a:oneidentity:syslog-ng:3.3.1
• Oneidentity » Syslog-Ng » Version: 3.3.10
  cpe:2.3:a:oneidentity:syslog-ng:3.3.10
• Oneidentity » Syslog-Ng » Version: 3.3.11
  cpe:2.3:a:oneidentity:syslog-ng:3.3.11
• Oneidentity » Syslog-Ng » Version: 3.3.2
  cpe:2.3:a:oneidentity:syslog-ng:3.3.2
• Oneidentity » Syslog-Ng » Version: 3.3.3
  cpe:2.3:a:oneidentity:syslog-ng:3.3.3
• Oneidentity » Syslog-Ng » Version: 3.3.4
  cpe:2.3:a:oneidentity:syslog-ng:3.3.4
• Oneidentity » Syslog-Ng » Version: 3.3.5
  cpe:2.3:a:oneidentity:syslog-ng:3.3.5
• Oneidentity » Syslog-Ng » Version: 3.3.5.90
  cpe:2.3:a:oneidentity:syslog-ng:3.3.5.90
• Oneidentity » Syslog-Ng » Version: 3.3.6
  cpe:2.3:a:oneidentity:syslog-ng:3.3.6
• Oneidentity » Syslog-Ng » Version: 3.3.6.90
  cpe:2.3:a:oneidentity:syslog-ng:3.3.6.90
• Oneidentity » Syslog-Ng » Version: 3.3.6.91
  cpe:2.3:a:oneidentity:syslog-ng:3.3.6.91
• Oneidentity » Syslog-Ng » Version: 3.3.7
  cpe:2.3:a:oneidentity:syslog-ng:3.3.7
• Oneidentity » Syslog-Ng » Version: 3.3.8
  cpe:2.3:a:oneidentity:syslog-ng:3.3.8
• Oneidentity » Syslog-Ng » Version: 3.3.9
  cpe:2.3:a:oneidentity:syslog-ng:3.3.9
• Oneidentity » Syslog-Ng » Version: 3.4.0
  cpe:2.3:a:oneidentity:syslog-ng:3.4.0
• Oneidentity » Syslog-Ng » Version: 3.4.1
  cpe:2.3:a:oneidentity:syslog-ng:3.4.1
• Oneidentity » Syslog-Ng » Version: 3.4.2
  cpe:2.3:a:oneidentity:syslog-ng:3.4.2
• Oneidentity » Syslog-Ng » Version: 3.4.3
  cpe:2.3:a:oneidentity:syslog-ng:3.4.3
• Oneidentity » Syslog-Ng » Version: 3.4.4
  cpe:2.3:a:oneidentity:syslog-ng:3.4.4
• Oneidentity » Syslog-Ng » Version: 3.4.5
  cpe:2.3:a:oneidentity:syslog-ng:3.4.5
• Oneidentity » Syslog-Ng » Version: 3.4.6
  cpe:2.3:a:oneidentity:syslog-ng:3.4.6
• Oneidentity » Syslog-Ng » Version: 3.4.7
  cpe:2.3:a:oneidentity:syslog-ng:3.4.7
• Oneidentity » Syslog-Ng » Version: 3.4.8
  cpe:2.3:a:oneidentity:syslog-ng:3.4.8
• Oneidentity » Syslog-Ng » Version: 3.5.0
  cpe:2.3:a:oneidentity:syslog-ng:3.5.0
• Oneidentity » Syslog-Ng » Version: 3.5.1
  cpe:2.3:a:oneidentity:syslog-ng:3.5.1
• Oneidentity » Syslog-Ng » Version: 3.5.2
  cpe:2.3:a:oneidentity:syslog-ng:3.5.2
• Oneidentity » Syslog-Ng » Version: 3.5.3
  cpe:2.3:a:oneidentity:syslog-ng:3.5.3
• Oneidentity » Syslog-Ng » Version: 3.5.4
  cpe:2.3:a:oneidentity:syslog-ng:3.5.4
• Oneidentity » Syslog-Ng » Version: 3.5.4.1
  cpe:2.3:a:oneidentity:syslog-ng:3.5.4.1
• Oneidentity » Syslog-Ng » Version: 3.5.5
  cpe:2.3:a:oneidentity:syslog-ng:3.5.5
• Oneidentity » Syslog-Ng » Version: 3.5.6
  cpe:2.3:a:oneidentity:syslog-ng:3.5.6
• Oneidentity » Syslog-Ng » Version: 3.6.0
  cpe:2.3:a:oneidentity:syslog-ng:3.6.0
• Oneidentity » Syslog-Ng » Version: 3.6.1
  cpe:2.3:a:oneidentity:syslog-ng:3.6.1
• Oneidentity » Syslog-Ng » Version: 3.6.2
  cpe:2.3:a:oneidentity:syslog-ng:3.6.2
• Oneidentity » Syslog-Ng » Version: 3.6.3
  cpe:2.3:a:oneidentity:syslog-ng:3.6.3
• Oneidentity » Syslog-Ng » Version: 3.6.4
  cpe:2.3:a:oneidentity:syslog-ng:3.6.4
• Oneidentity » Syslog-Ng » Version: 3.6.4-12.8.1
  cpe:2.3:a:oneidentity:syslog-ng:3.6.4-12.8.1
• Oneidentity » Syslog-Ng » Version: 3.7.0
  cpe:2.3:a:oneidentity:syslog-ng:3.7.0
• Oneidentity » Syslog-Ng » Version: 3.7.1
  cpe:2.3:a:oneidentity:syslog-ng:3.7.1
• Oneidentity » Syslog-Ng » Version: 3.7.2
  cpe:2.3:a:oneidentity:syslog-ng:3.7.2
• Oneidentity » Syslog-Ng » Version: 3.7.3
  cpe:2.3:a:oneidentity:syslog-ng:3.7.3
• Oneidentity » Syslog-Ng » Version: 3.8.0
  cpe:2.3:a:oneidentity:syslog-ng:3.8.0
• Oneidentity » Syslog-Ng » Version: 3.8.1
  cpe:2.3:a:oneidentity:syslog-ng:3.8.1
• Oneidentity » Syslog-Ng » Version: 3.9.1
  cpe:2.3:a:oneidentity:syslog-ng:3.9.1
• Opensuse » Backports Sle » Version: 15.0
  cpe:2.3:a:opensuse:backports_sle:15.0
• Suse » Linux Enterprise Debuginfo » Version: 11
  cpe:2.3:a:suse:linux_enterprise_debuginfo:11
• Suse » Linux Enterprise Module For Legacy » Version: 12
  cpe:2.3:a:suse:linux_enterprise_module_for_legacy:12
• Suse » Linux Enterprise Point Of Sale » Version: 11
  cpe:2.3:a:suse:linux_enterprise_point_of_sale:11
• Opensuse » Leap » Version: 15.1
  cpe:2.3:o:opensuse:leap:15.1
• Suse » Linux Enterprise Server » Version: 11
  cpe:2.3:o:suse:linux_enterprise_server:11
• Suse » Linux Enterprise Server » Version: 12
  cpe:2.3:o:suse:linux_enterprise_server:12