Security update for net-snmp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:4191-1 Final 1 1 2021-12-27T16:28:08Z current 2021-12-27T16:28:08Z 2021-12-27T16:28:08Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for net-snmp This update for net-snmp fixes the following issues: - CVE-2020-15862: Make extended MIB read-only (bsc#1174961) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SAP-Azure-2021-4191,Image SLES15-SAP-Azure-BYOS-2021-4191,Image SLES15-SAP-Azure-LI-BYOS-Production-2021-4191,Image SLES15-SAP-Azure-VLI-BYOS-Production-2021-4191,Image SLES15-SAP-EC2-HVM-2021-4191,Image SLES15-SAP-EC2-HVM-BYOS-2021-4191,Image SLES15-SAP-GCE-2021-4191,Image SLES15-SAP-GCE-BYOS-2021-4191,SUSE-2021-4191,SUSE-SLE-Product-HPC-15-2021-4191,SUSE-SLE-Product-SLES-15-2021-4191,SUSE-SLE-Product-SLES_SAP-15-2021-4191 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20214191-1/ Link for SUSE-SU-2021:4191-1 https://lists.suse.com/pipermail/sle-security-updates/2021-December/009952.html E-Mail link for SUSE-SU-2021:4191-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1152968 SUSE Bug 1152968 https://bugzilla.suse.com/1174961 SUSE Bug 1174961 https://www.suse.com/security/cve/CVE-2020-15862/ SUSE CVE CVE-2020-15862 page Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 libsnmp30-5.7.3-7.13.1 net-snmp-5.7.3-7.13.1 perl-SNMP-5.7.3-7.13.1 snmp-mibs-5.7.3-7.13.1 libsnmp30-32bit-5.7.3-7.13.1 libsnmp30-64bit-5.7.3-7.13.1 net-snmp-devel-5.7.3-7.13.1 net-snmp-devel-32bit-5.7.3-7.13.1 net-snmp-devel-64bit-5.7.3-7.13.1 python2-net-snmp-5.7.3-7.13.1 python3-net-snmp-5.7.3-7.13.1 libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-BYOS net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-BYOS perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-BYOS snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-BYOS libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE libsnmp30-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE-BYOS net-snmp-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE-BYOS perl-SNMP-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE-BYOS snmp-mibs-5.7.3-7.13.1 as a component of Image SLES15-SAP-GCE-BYOS libsnmp30-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS net-snmp-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS net-snmp-devel-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS perl-SNMP-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS snmp-mibs-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libsnmp30-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS net-snmp-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS net-snmp-devel-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS perl-SNMP-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS snmp-mibs-5.7.3-7.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libsnmp30-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS net-snmp-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS net-snmp-devel-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS perl-SNMP-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS snmp-mibs-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libsnmp30-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 net-snmp-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 net-snmp-devel-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 perl-SNMP-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 snmp-mibs-5.7.3-7.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root. CVE-2020-15862 Image SLES15-SAP-Azure-BYOS:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-Azure-BYOS:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-Azure-BYOS:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-Azure-BYOS:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-Azure:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-Azure:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-Azure:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-Azure:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM-BYOS:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM-BYOS:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM-BYOS:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM-BYOS:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-EC2-HVM:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-GCE-BYOS:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-GCE-BYOS:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-GCE-BYOS:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-GCE-BYOS:snmp-mibs-5.7.3-7.13.1 Image SLES15-SAP-GCE:libsnmp30-5.7.3-7.13.1 Image SLES15-SAP-GCE:net-snmp-5.7.3-7.13.1 Image SLES15-SAP-GCE:perl-SNMP-5.7.3-7.13.1 Image SLES15-SAP-GCE:snmp-mibs-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libsnmp30-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:net-snmp-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:net-snmp-devel-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:perl-SNMP-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:snmp-mibs-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libsnmp30-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:net-snmp-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:net-snmp-devel-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:perl-SNMP-5.7.3-7.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:snmp-mibs-5.7.3-7.13.1 SUSE Linux Enterprise Server 15-LTSS:libsnmp30-5.7.3-7.13.1 SUSE Linux Enterprise Server 15-LTSS:net-snmp-5.7.3-7.13.1 SUSE Linux Enterprise Server 15-LTSS:net-snmp-devel-5.7.3-7.13.1 SUSE Linux Enterprise Server 15-LTSS:perl-SNMP-5.7.3-7.13.1 SUSE Linux Enterprise Server 15-LTSS:snmp-mibs-5.7.3-7.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libsnmp30-5.7.3-7.13.1 SUSE Linux Enterprise Server for SAP Applications 15:net-snmp-5.7.3-7.13.1 SUSE Linux Enterprise Server for SAP Applications 15:net-snmp-devel-5.7.3-7.13.1 SUSE Linux Enterprise Server for SAP Applications 15:perl-SNMP-5.7.3-7.13.1 SUSE Linux Enterprise Server for SAP Applications 15:snmp-mibs-5.7.3-7.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20214191-1/ https://www.suse.com/security/cve/CVE-2020-15862.html CVE-2020-15862 https://bugzilla.suse.com/1174961 SUSE Bug 1174961 https://bugzilla.suse.com/1193875 SUSE Bug 1193875 https://bugzilla.suse.com/1196341 SUSE Bug 1196341