CVE-2020-24361
SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, P ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.12 | snmptt | 1.4.2-r0 |
| alpine 3.13 | snmptt | 1.4.2-r0 |
| alpine 3.14 | snmptt | 1.4.2-r0 |
| alpine 3.15 | snmptt | 1.4.2-r0 |
| alpine 3.16 | snmptt | 1.4.2-r0 |
| alpine 3.17 | snmptt | 1.4.2-r0 |
| alpine 3.18 | snmptt | 1.4.2-r0 |
| alpine 3.19 | snmptt | 1.4.2-r0 |
| alpine 3.20 | snmptt | 1.4.2-r0 |
| alpine 3.21 | snmptt | 1.4.2-r0 |
| alpine 3.22 | snmptt | 1.4.2-r0 |
| alpine 3.23 | snmptt | 1.4.2-r0 |
Alle 23 Einträge aus 23 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.12 | snmptt | 1.4.2-r0 |
| alpine 3.13 | snmptt | 1.4.2-r0 |
| alpine 3.14 | snmptt | 1.4.2-r0 |
| alpine 3.15 | snmptt | 1.4.2-r0 |
| alpine 3.16 | snmptt | 1.4.2-r0 |
| alpine 3.17 | snmptt | 1.4.2-r0 |
| alpine 3.18 | snmptt | 1.4.2-r0 |
| alpine 3.19 | snmptt | 1.4.2-r0 |
| alpine 3.20 | snmptt | 1.4.2-r0 |
| alpine 3.21 | snmptt | 1.4.2-r0 |
| alpine 3.22 | snmptt | 1.4.2-r0 |
| alpine 3.23 | snmptt | 1.4.2-r0 |
| alpine 3.24 | snmptt | 1.4.2-r0 |
| alpine edge | snmptt | 1.4.2-r0 |
| debian 10 | snmptt | kein Fix angegeben |
| debian 11 | snmptt | 1.4.2-1 |
| debian 12 | snmptt | 1.4.2-1 |
| debian 13 | snmptt | 1.4.2-1 |
| debian 14 | snmptt | 1.4.2-1 |
| debian 9 | snmptt | 1.4-1+deb9u1 |
| echo | snmptt | 1.4.2-1 |
| ubuntu 18.04-ESM | snmptt | kein Fix angegeben |
| ubuntu 20.04-ESM | snmptt | kein Fix angegeben |