Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4471-1
HistoryAug 24, 2020 - 12:00 a.m.

Net-SNMP vulnerabilities

2020-08-2400:00:00
ubuntu.com
41

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

13.3%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • net-snmp - SNMP (Simple Network Management Protocol) server and applications

Details

Tobias Neitzel discovered that Net-SNMP incorrectly handled certain symlinks.
An attacker could possibly use this issue to access sensitive information.
(CVE-2020-15861)

It was discovered that Net-SNMP incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-15862)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchlibsnmp-base< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchlibsnmp-dev< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchlibsnmp-perl< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchlibsnmp-perl-dbgsym< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchlibsnmp35< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchlibsnmp35-dbg< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchsnmp< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchsnmp-dbgsym< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchsnmpd< 5.8+dfsg-2ubuntu2.3UNKNOWN
Ubuntu20.04noarchsnmpd-dbgsym< 5.8+dfsg-2ubuntu2.3UNKNOWN
Rows per page:
1-10 of 651

Related

nessus 53
openvas 22
photon 6
debian 3
ubuntu 1
ibm 4
osv 5
gentoo 1
prion 2
cve 2
ubuntucve 2
redhatcve 2
debiancve 2
oraclelinux 3
redhat 11
amazon 2
f5 2
broadcom 1
almalinux 1
centos 1
veracode 1
rosalinux 1
suse 1
nessus
nessus
Photon OS 1.0: Net PHSA-2020-1.0-0318
2020-09-01 00:00:00
EulerOS 2.0 SP9 : net-snmp (EulerOS-SA-2020-2179)
2020-10-09 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : Net-SNMP regression (USN-4471-2)
2020-09-02 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2292)
2020-10-30 00:00:00
Ubuntu: Security Advisory (USN-4471-2)
2020-09-02 00:00:00
Debian: Security Advisory (DLA-2313-1)
2020-08-05 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0318
2020-08-30 00:00:00
Important Photon OS Security Update - PHSA-2020-0138
2020-09-09 00:00:00
Important Photon OS Security Update - PHSA-2020-0318
2020-08-30 00:00:00
debian
debian
[SECURITY] [DSA 4746-1] net-snmp security update
2020-08-15 11:56:43
[SECURITY] [DSA 4746-1] net-snmp security update
2020-08-15 11:56:43
[SECURITY] [DLA 2313-1] net-snmp security update
2020-08-04 15:30:18
ubuntu
ubuntu
Net-SNMP regression
2020-09-01 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Net-SNMP library affect IBM Spectrum Control (CVE-2020-15861, CVE-2020-15862)
2020-11-05 09:51:32
Security Bulletin: Multiple vulnerabilities in Net-SNMP affects Netcool/OMNIbus SNMP Probe (CVE-2020-15861, CVE-2020-15862)
2020-11-03 02:05:40
Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Netcool/OMNIbus Gateway for SNMP (CVE-2020-15861, CVE-2020-15862)
2020-11-03 02:07:52
osv
osv
net-snmp - security update
2020-08-15 00:00:00
net-snmp - security update
2020-08-04 00:00:00
CVE-2020-15861
2020-08-20 01:17:13
gentoo
gentoo
Net-SNMP: Multiple vulnerabilities
2020-08-26 00:00:00
prion
prion
Code injection
2020-08-20 01:17:00
Input validation
2020-08-20 01:17:00
cve
cve
CVE-2020-15861
2020-08-20 01:17:00
CVE-2020-15862
2020-08-20 01:17:00
ubuntucve
ubuntucve
CVE-2020-15861
2020-08-06 00:00:00
CVE-2020-15862
2020-08-06 00:00:00
redhatcve
redhatcve
CVE-2020-15861
2020-07-31 14:14:53
CVE-2020-15862
2020-08-27 08:37:55
debiancve
debiancve
CVE-2020-15861
2020-08-20 01:17:00
CVE-2020-15862
2020-08-20 01:17:00
oraclelinux
oraclelinux
net-snmp security update
2020-12-07 00:00:00
net-snmp security update
2020-11-18 00:00:00
net-snmp security and bug fix update
2020-12-17 00:00:00
redhat
redhat
(RHSA-2020:5420) Important: net-snmp security and bug fix update
2020-12-15 08:08:18
(RHSA-2020:5201) Important: net-snmp security and bug fix update
2020-11-24 09:49:57
(RHSA-2020:5350) Important: net-snmp security update
2020-12-07 10:48:28
amazon
amazon
Important: net-snmp
2021-01-05 23:34:00
Important: net-snmp
2021-01-12 22:51:00
f5
f5
K07335610 : SNMP vulnerability CVE-2020-15861
2020-09-08 00:00:00
K44318398 : Net-SNMP vulnerability CVE-2020-15862
2021-04-23 00:00:00
broadcom
broadcom
Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.
2023-08-01 00:00:00
almalinux
almalinux
Important: net-snmp security and bug fix update
2020-12-15 15:56:47
centos
centos
net security update
2021-01-25 14:08:35
veracode
veracode
Arbtirary Command Execution
2020-11-21 12:51:33
rosalinux
rosalinux
Advisory ROSA-SA-2021-1929
2021-07-02 17:32:57
suse
suse
Security update for opera (important)
2022-02-25 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

13.3%

JSON
Related for USN-4471-1
nessus53openvas22photon6debian3ubuntu1ibm4osv5gentoo1prion2cve2ubuntucve2redhatcve2debiancve2oraclelinux3redhat11amazon2f52broadcom1almalinux1centos1veracode1rosalinux1suse1