CVE-2020-15861
Fixed in a distro release EPSS <1%CVSS 7.8
Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.
Products: net-snmp, canonical ubuntu_linux, netapp cloud_backup, netapp smi-s_provider, netapp solidfire_&_hci_management_node
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | net-snmp | 5.7.3+dfsg-5+deb10u1 |
| Debian 12 | net-snmp | 5.8+dfsg-5 |
| Debian 13 | net-snmp | 5.8+dfsg-5 |
| Debian 14 | net-snmp | 5.8+dfsg-5 |
| Debian 9 | net-snmp | 5.7.3+dfsg-1.7+deb9u3 |
| Ubuntu 16.04 LTS | net-snmp | 5.7.3+dfsg-1ubuntu4.5 |
| Ubuntu 18.04 LTS | net-snmp | 5.7.3+dfsg-1.8ubuntu3.5 |
| Ubuntu 20.04 LTS | net-snmp | 5.8+dfsg-2ubuntu2.3 |
| Ubuntu Pro 14.04 LTS | net-snmp | 5.7.2~dfsg-8.1ubuntu3.3+esm1 |