7.8

CVE-2020-15862: canonical ubuntu_linux Improper Privilege Management

CVSS: 7.8v3.1HighModified
AliasesSUSE-SU-2021:4191-1SUSE-SU-2022:0030-1RHSA-2020:5129
Published 19-08-2020Last modified 04-08-2024
Open JSON

Vulnerability summary

CVE-2020-15862 is a high (CVSS 7.8) Improper Privilege Management vulnerability in canonical ubuntu_linux. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.38%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 5
DSA-4746-1OPENSUSE-SU-2022:0050-1SUSE-SU-2022:0050-1SUSE-SU-2022:0050-2USN-4471-1USN-4471-2

Timeline

  1. 19-08-2020
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.38%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

0.00 pp

From 0.38% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse18 products
  • net-snmp&distro=HPE Helion OpenStack 8< 5.7.3-6.9.1
  • net-snmp&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 5.7.3-7.13.1
  • net-snmp&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 5.7.3-7.13.1
  • net-snmp&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 5.7.3-6.9.1
  • net-snmp&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 5.7.3-6.9.1
Redhat15 products
  • net-snmp< 1:5.5-60.el6_10.2 | < 1:5.8-7.el8_0.4 | < 1:5.7.2-49.el7_9.1 | < 1:5.8-12.el8_1.3 | < 1:5.8-14.el8_2.3 | < 1:5.8-18.el8_3.1 | < 1:5.7.2-28.el7_4.4 | < 1:5.7.2-38.el7_6.3 | < 1:5.7.2-43.el7_7.7
  • net-snmp-agent-libs< 1:5.8-7.el8_0.4 | < 1:5.7.2-49.el7_9.1 | < 1:5.8-12.el8_1.3 | < 1:5.8-14.el8_2.3 | < 1:5.8-18.el8_3.1 | < 1:5.7.2-28.el7_4.4 | < 1:5.7.2-38.el7_6.3 | < 1:5.7.2-43.el7_7.7
  • net-snmp-agent-libs-debuginfo< 1:5.8-7.el8_0.4 | < 1:5.8-12.el8_1.3 | < 1:5.8-14.el8_2.3 | < 1:5.8-18.el8_3.1
  • net-snmp-debuginfo< 1:5.5-60.el6_10.2 | < 1:5.8-7.el8_0.4 | < 1:5.7.2-49.el7_9.1 | < 1:5.8-12.el8_1.3 | < 1:5.8-14.el8_2.3 | < 1:5.8-18.el8_3.1 | < 1:5.7.2-28.el7_4.4 | < 1:5.7.2-38.el7_6.3 | < 1:5.7.2-43.el7_7.7
  • net-snmp-debugsource< 1:5.8-7.el8_0.4 | < 1:5.8-12.el8_1.3 | < 1:5.8-14.el8_2.3 | < 1:5.8-18.el8_3.1
Netapp4 products
Canonical1 product
Debian1 product
  • net-snmp< 5.8+dfsg-4 | < 5.7.3+dfsg-1.7+deb9u2
Net-snmp1 product
Ubuntu1 product
  • net-snmp< 5.7.2~dfsg-8.1ubuntu3.3+esm2 | < 5.7.3+dfsg-1ubuntu4.6 | < 5.7.3+dfsg-1.8ubuntu3.6 | < 5.8+dfsg-2ubuntu2.3

7 vendors · 41 products

References

46 links
Show all 46 references