critical
CVE-2020-24361
SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, P ...
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.12 | snmptt | 1.4.2-r0 |
| alpine 3.13 | snmptt | 1.4.2-r0 |
| alpine 3.14 | snmptt | 1.4.2-r0 |
| alpine 3.15 | snmptt | 1.4.2-r0 |
| alpine 3.16 | snmptt | 1.4.2-r0 |
| alpine 3.17 | snmptt | 1.4.2-r0 |
| alpine 3.18 | snmptt | 1.4.2-r0 |
| alpine 3.19 | snmptt | 1.4.2-r0 |
| alpine 3.20 | snmptt | 1.4.2-r0 |
| alpine 3.21 | snmptt | 1.4.2-r0 |
| alpine 3.22 | snmptt | 1.4.2-r0 |
| alpine 3.23 | snmptt | 1.4.2-r0 |
Show all 23 entries from 23 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.12 | snmptt | 1.4.2-r0 |
| alpine 3.13 | snmptt | 1.4.2-r0 |
| alpine 3.14 | snmptt | 1.4.2-r0 |
| alpine 3.15 | snmptt | 1.4.2-r0 |
| alpine 3.16 | snmptt | 1.4.2-r0 |
| alpine 3.17 | snmptt | 1.4.2-r0 |
| alpine 3.18 | snmptt | 1.4.2-r0 |
| alpine 3.19 | snmptt | 1.4.2-r0 |
| alpine 3.20 | snmptt | 1.4.2-r0 |
| alpine 3.21 | snmptt | 1.4.2-r0 |
| alpine 3.22 | snmptt | 1.4.2-r0 |
| alpine 3.23 | snmptt | 1.4.2-r0 |
| alpine 3.24 | snmptt | 1.4.2-r0 |
| alpine edge | snmptt | 1.4.2-r0 |
| debian 10 | snmptt | no fix listed |
| debian 11 | snmptt | 1.4.2-1 |
| debian 12 | snmptt | 1.4.2-1 |
| debian 13 | snmptt | 1.4.2-1 |
| debian 14 | snmptt | 1.4.2-1 |
| debian 9 | snmptt | 1.4-1+deb9u1 |
| echo | snmptt | 1.4.2-1 |
| ubuntu 18.04-ESM | snmptt | no fix listed |
| ubuntu 20.04-ESM | snmptt | no fix listed |