High · 7.8 CVE-2020-15861 EUVD-2020-7842GHSA-mfrp-422x-34qv

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

Published Aug 19, 2020 · Updated Dec 3, 2025 · Assigned by mitre

Package: net-snmp Package: net-snmp Ecosystem: Debian Ecosystem: Ubuntu

Description

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	net-snmp	5.8+dfsg-5	—
Debian 13	net-snmp	5.8+dfsg-5	—
Debian 12	net-snmp	5.8+dfsg-5	—
Debian 10	net-snmp	5.7.3+dfsg-5+deb10u1	DSA-4746-1
Debian 9	net-snmp	5.7.3+dfsg-1.7+deb9u3	DLA-2313-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 20.04 LTS	net-snmp	5.8+dfsg-2ubuntu2.3	USN-4471-1
Ubuntu 18.04 LTS	net-snmp	5.7.3+dfsg-1.8ubuntu3.5	USN-4471-1
Ubuntu 16.04 LTS	net-snmp	5.7.3+dfsg-1ubuntu4.5	USN-4471-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 14.04 LTS	net-snmp	5.7.2~dfsg-8.1ubuntu3.3+esm1	USN-4471-1

Advisories 7

USN-4471-1 net-snmp vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
DSA-4746-1 net-snmp - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-2313-1 net-snmp - security update Debian Security (DSA / DLA) · Mar 9, 2026
WID-SEC-2025-0225 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 1, 2025
WID-SEC-2023-2045 Net-SNMP: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jul 31, 2025
WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
WID-SEC-2023-1969 HPE Fabric OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Aug 6, 2023

References