Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

Debian 9 Stretch: DLA-2299-1 Moderate: Net-SNMP Escalation Issue

debian lts
Calendar Grey July 30, 2020
Dist Debian Esm H88
An exploit allowing privilege escalation within Net-SNMP has been patched in the latest Debian 9 Stretch update, bolstering its security framework.
A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks
Topics%20covered

Topics Covered

security advisory security issue debian privilege escalation net-snmp network tools

Summary

* It is still possible to enable this MIB via the
--with-mib-modules configure option.

* Another MIB that provides similar functionality, namely
ucd-snmp/extensible, is disabled by default.

* The security risk of ucd-snmp/pass and ucd-snmp/pass_persist is
lower since these modules only introduce a security risk if the
invoked scripts are exploitable.


For Debian 9 "Stretch", this issue has been fixed in net-snmp version
5.7.3+dfsg-1.7+deb9u2.

We recommend that you upgrade your net-snmp packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Package: net-snmp
Version: 5.7.3+dfsg-1.7+deb9u2
Debian Bug: #965166

Topics%20covered

Topics Covered

security advisory security issue debian privilege escalation net-snmp network tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here