CVE-2020-15862
Summary
| CVE | CVE-2020-15862 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-08-20 01:17:00 UTC |
|---|
| Updated | 2023-11-22 16:15:00 UTC |
|---|
| Description | Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| August 2020 Net-SNMP Vulnerabilities in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
Third Party Advisory |
| make the extend mib read-only by default · net-snmp/net-snmp@77f6c60 · GitHub |
CONFIRM |
github.com |
Patch, Third Party Advisory |
| Net-SNMP: Multiple vulnerabilities (GLSA 202008-12) — Gentoo security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| snmpd: Disable extend mib Closes: #965166 (fad87254) · Commits · Debian / net-snmp · GitLab |
CONFIRM |
salsa.debian.org |
Patch, Third Party Advisory |
| #965166 - snmpd privilege escalation - Debian Bug report logs |
MISC |
bugs.debian.org |
Issue Tracking, Third Party Advisory |
| USN-4471-1: Net-SNMP vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
Third Party Advisory |
| CVE-2020-15862 |
MISC |
security-tracker.debian.org |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 352292 Amazon Linux Security Update for net-snmp: AL2012-2021-333
- 376248 IBM Spectrum Control Multiple Vulnerabilities (6359903,6359899,6359901)
- 376926 Alibaba Cloud Linux Security Update for net-snmp (ALINUX3-SA-2021:0005)
- 377196 Alibaba Cloud Linux Security Update for net-snmp (ALINUX2-SA-2020:0190)
- 591311 Bosch Rexroth PRA-ES8P2S Ethernet-Switch Multiple Vulnerabilities (BOSCH-SA-247053-BT)
- 751561 SUSE Enterprise Linux Security Update for net-snmp (SUSE-SU-2021:4191-1)
- 751579 SUSE Enterprise Linux Security Update for net-snmp (SUSE-SU-2022:0030-1)
- 751589 SUSE Enterprise Linux Security Update for net-snmp (SUSE-SU-2022:0050-1)
- 751591 OpenSUSE Security Update for net-snmp (openSUSE-SU-2022:0050-1)
- 751907 SUSE Enterprise Linux Security Update for net-snmp (SUSE-SU-2022:0050-2)
- 940324 AlmaLinux Security Update for net-snmp (ALSA-2020:5480)
