Several vulnerabilities were discovered in net-snmp, a suite of Simple Network Management Protocol applications, which could lead to privilege escalation.

The remote host is affected by the vulnerability described in GLSA-202008-12 (Net-SNMP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Net-SNMP. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - net-snmp before 5.8.1.pre1 has a double free in     usm_free_usmStateReference in snmplib/snmpusm.c via an     SNMPv3 GetBulk request. NOTE: this affects net-snmp     packages shipped to end users by multiple Linux     distributions, but might not affect an upstream     release.(CVE-2019-20892)

  - Net-SNMP through 5.7.3 has Improper Privilege     Management because SNMP WRITE access to the EXTEND MIB     provides the ability to run arbitrary commands as     root.(CVE-2020-15862)

  - Net-SNMP through 5.7.3 allows Escalation of Privileges     because of UNIX symbolic link (symlink)     following.(CVE-2020-15861)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
139631	Debian DSA-4746-1 : net-snmp - security update	Nessus	Debian Local Security Checks	8/18/2020	2/26/2024	high
164567	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.6)	Nessus	Misc.	9/1/2022	3/19/2024	critical
139888	GLSA-202008-12 : Net-SNMP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	8/27/2020	2/23/2024	high
147440	EulerOS Virtualization 2.9.1 : net-snmp (EulerOS-SA-2021-1614)	Nessus	Huawei Local Security Checks	3/10/2021	1/11/2024	high

Detections

Analytics

Plugins Search

high

critical

high

high