Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade net-snmp | Aug 7, 2020 | Aug 7, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Aug 27, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmp-libs | Nov 3, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-devel | Sep 28, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp | Nov 2, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-devel | Sep 29, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-libs | Oct 26, 2020 | Aug 20, 2020 |
| Ubuntu | — | Upgrade libsnmp-perl (Ubuntu Pro)Upgrade libsnmp-perlUpgrade libsnmp15Upgrade snmpdUpgrade snmpd (Ubuntu Pro)Upgrade libsnmp30Upgrade libsnmp-base (Ubuntu Pro)Upgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp35Upgrade libsnmp-base | Aug 25, 2020 | Aug 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub