Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-15862: A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. 1873038: CVE-2020-15862 net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | net-snmp | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-agent-libs | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-debuginfo | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-devel | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-gui | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-libs | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-perl | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-python | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-sysvinit | 1:5.7.2-49.amzn2.1 |
| Amazon Linux · 2 | net-snmp-utils | 1:5.7.2-49.amzn2.1 |
Vulnerabilities 1
-
Unscored —
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-15862.html