net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

NewStart CGSL CORE 5.05 / MAIN 5.05 : net-snmp Vulnerability (NS-SA-2020-0094)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has net-snmp packages installed that are affected by a vulnerability: - snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cau...

NewStart CGSL CORE 5.04 / MAIN 5.04 : net-snmp Vulnerability (NS-SA-2020-0063)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has net-snmp packages installed that are affected by a vulnerability: - snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cau...

RHEL 8 : net-snmp (RHSA-2020:5372)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5372 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

RHEL 7 : net-snmp (RHSA-2020:5350)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5350 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Oracle Linux 7 : net-snmp (ELSA-2020-5350)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5350 advisory. 1:5.7.2-49.1 - fix CVE-2020-15862 1875496 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

net-snmp security update

1:5.7.2-49.1 - fix CVE-2020-15862 1875496...

Scientific Linux Security Update : net-snmp on SL7.x i686/x86_64 (2020:5350)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5350-1 advisory. - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Note that Nessus has not tested for this...

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Scientific Linux Security Update : net-snmp on SL6.x i686/x86_64 (2020:5129)

The remote Scientific Linux 6 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5129-1 advisory. - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Note that Nessus has not tested for this...

RHEL 8 : net-snmp (RHSA-2020:5201)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5201 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

Arbtirary Command Execution

net-snmp is vulnerable to arbitrary command execution. An attacker is able to execute arbitrary commands as root due to SNMP write access to the EXTEND MIB...

OracleVM 3.4 : net-snmp (OVMSA-2020-0052)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - fix CVE-2020-15862 1875960 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

F5 Networks BIG-IP : SNMP vulnerability (K45212738)

net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release. CVE-2019-20892 Impact When exploited,...

net-snmp security update

1:5.5-60.0.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-60.el6.2 - fix CVE-2020-15862 1875960...

Oracle Linux 6 : net-snmp (ELSA-2020-5129)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5129 advisory. 1:5.5-60.0.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-60.el6.2 - fix CVE-2020-15862 1875960 Tenable has extracted the preceding descripti...