USN-4471-2
net-snmp regression
USN-4471-1 fixed a vulnerability in Net-SNMP. The updated introduced a regression making nsExtendCacheTime not settable. This update fixes the problem adding the cacheTime feature flag.
Original advisory details:
Tobias Neitzel discovered that Net-SNMP incorrectly handled certain symlinks. An attacker could possibly use this issue to access sensitive information. (CVE-2020-15861)
It was discovered that Net-SNMP incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-15862)
What each source reports
OSV No score
net-snmp regression
USN-4471-1 fixed a vulnerability in Net-SNMP. The updated introduced a regression making nsExtendCacheTime not settable. This update fixes the problem adding the cacheTime feature flag.
Original advisory details:
Tobias Neitzel discovered that Net-SNMP incorrectly handled certain symlinks. An attacker could possibly use this issue to access sensitive information. (CVE-2020-15861)
It was discovered that Net-SNMP incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-15862)
- Record
USN-4471-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
net-snmpUbuntu:Pro:14.04:LTS |
before 5.7.2~dfsg-8.1ubuntu3.3+esm2, plus listed versions 5.7.2~dfsg-8ubuntu15.7.2~dfsg-8ubuntu25.7.2~dfsg-8.1ubuntu15.7.2~dfsg-8.1ubuntu25.7.2~dfsg-8.1ubuntu3 Show 4 moreShow less5.7.2~dfsg-8.1ubuntu3.15.7.2~dfsg-8.1ubuntu3.25.7.2~dfsg-8.1ubuntu3.35.7.2~dfsg-8.1ubuntu3.3+esm1 |
5.7.2~dfsg-8.1ubuntu3.3+esm2 |
net-snmpUbuntu:16.04:LTS |
before 5.7.3+dfsg-1ubuntu4.6, plus listed versions 5.7.3+dfsg-1ubuntu25.7.3+dfsg-1ubuntu35.7.3+dfsg-1ubuntu45.7.3+dfsg-1ubuntu4.15.7.3+dfsg-1ubuntu4.25.7.3+dfsg-1ubuntu4.35.7.3+dfsg-1ubuntu4.45.7.3+dfsg-1ubuntu4.5 |
5.7.3+dfsg-1ubuntu4.6 |
net-snmpUbuntu:18.04:LTS |
before 5.7.3+dfsg-1.8ubuntu3.6, plus listed versions 5.7.3+dfsg-1.7ubuntu15.7.3+dfsg-1.8ubuntu15.7.3+dfsg-1.8ubuntu25.7.3+dfsg-1.8ubuntu35.7.3+dfsg-1.8ubuntu3.15.7.3+dfsg-1.8ubuntu3.25.7.3+dfsg-1.8ubuntu3.35.7.3+dfsg-1.8ubuntu3.5 |
5.7.3+dfsg-1.8ubuntu3.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4471-2 is a vulnerability with no CVSS score yet in net-snmp, published September 1, 2020. No source lists public exploit code. Fixed in net-snmp 5.7.2~dfsg-8.1ubuntu3.3+esm2.