DSA-4746-1 net-snmp - security update

Bulletin has no description...

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP arises from improper privilege assignment. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP exists due to incorrect privilege assignment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its integrity, and cause service failur...

UBUNTU-CVE-2020-15861

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following...

CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

Debian DLA-2313-1 : net-snmp security update

A privilege escalation vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks, due to incorrect symlink handling CVE-2020-15861. This security update also applies an upstream fix to their previous handling of...

CVE-2020-15861

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following...

UBUNTU-CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

Debian: Security Advisory (DLA-2313-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2313-1] net-snmp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2313-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 04, 2020 https://wiki.debian.org/LTS -...

DLA-2313-1 net-snmp - security update

Bulletin has no description...

CVE-2020-15861

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following...

Debian: Security Advisory (DLA-2299-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-1814)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2299-1 : net-snmp security update

A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks. Upstream notes that : - It is still possible to enable this MIB via the --with-mib-modules configure option. - Another MIB th...

[SECURITY] [DLA 2299-1] net-snmp security update

Package : net-snmp Version : 5.7.3+dfsg-1.7+deb9u2 Debian Bug : 965166 A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks. Upstream notes that: It is still possible to enable th...

EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2020-1814)

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects...

DLA-2299-1 net-snmp - security update

Bulletin has no description...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-18066)

Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID: CVE-2018-18066 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by an error in snmpoidcompare in snmplib/snmpapi.c. By sending a specially-crafted UDP packet, a remote attacker...

Amazon Linux 2 : net-snmp (ALAS-2020-1454)

The version of net-snmp installed on the remote host is prior to 5.7.2-48. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1454 advisory. snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticate...

Medium: net-snmp

Issue Overview: snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. CVE-2018-18066 Affected Packages: net-snmp...