UBUNTU-CVE-2020-24361: Critical severity ubuntu/snmptt vulnerability
Published Aug 16, 2020
·Updated
SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknowntrapexec.
Affected Software
3 affected componentsFixes available
ubuntu/snmptt<1.4-1ubuntu0.16.04.1~esm1
1.4-1ubuntu0.16.04.1~esm1
ubuntu/snmptt<1.4-1ubuntu0.18.04.1~esm1
1.4-1ubuntu0.18.04.1~esm1
ubuntu/snmptt<1.4-2ubuntu0.1~esm1
1.4-2ubuntu0.1~esm1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in 1.4-1ubuntu0.16.04.1~esm1 - Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in 1.4-1ubuntu0.18.04.1~esm1 - Upgrade
Upgrade
ubuntu/snmpttto a version that resolves this vulnerability.Fixed in 1.4-2ubuntu0.1~esm1
Event History
Aug 16, 2020
CVE Published
via OSV·04:15 AM
Data Sourced
via OSV·04:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Does an attacker need credentials or user interaction to exploit this issue?
No. The CVSS vector indicates network access, low attack complexity, no privileges required, and no user interaction.
2
What level of impact could successful exploitation have?
Successful exploitation can result in high impact to confidentiality, integrity, and availability, consistent with execution of shell code.