Red Hat Security AdvisoryRHSA-2020:5350
net-snmp security update
Released 2020-12-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) net-snmp-1:5.7.2-49.el7_9.1, net-snmp-agent-libs-1:5.7.2-49.el7_9.1, net-snmp-libs-1:5.7.2-49.el7_9.1 +1
- Red Hat Enterprise Linux Client Optional (v. 7) net-snmp-devel-1:5.7.2-49.el7_9.1, net-snmp-gui-1:5.7.2-49.el7_9.1, net-snmp-perl-1:5.7.2-49.el7_9.1 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) net-snmp-devel-1:5.7.2-49.el7_9.1, net-snmp-gui-1:5.7.2-49.el7_9.1, net-snmp-perl-1:5.7.2-49.el7_9.1 +2
- Red Hat Enterprise Linux Server (v. 7) net-snmp-1:5.7.2-49.el7_9.1, net-snmp-agent-libs-1:5.7.2-49.el7_9.1, net-snmp-agent-libs-1:5.7.2-49.el7_9.1.ppc +5
- Red Hat Enterprise Linux Server Optional (v. 7) net-snmp-gui-1:5.7.2-49.el7_9.1, net-snmp-perl-1:5.7.2-49.el7_9.1, net-snmp-python-1:5.7.2-49.el7_9.1 +1
- Red Hat Enterprise Linux Workstation (v. 7) net-snmp-1:5.7.2-49.el7_9.1, net-snmp-agent-libs-1:5.7.2-49.el7_9.1, net-snmp-devel-1:5.7.2-49.el7_9.1 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) net-snmp-gui-1:5.7.2-49.el7_9.1, net-snmp-perl-1:5.7.2-49.el7_9.1, net-snmp-python-1:5.7.2-49.el7_9.1 +1
Fixes 1 record
Priority LOW 34
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2020-08-19 · Partial fix CWE-269
