CVE-2020-15862: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only; version 20.04 only
• Net-SNMP Net-SNMP: before 5.8.1 (fixed in 5.8.1)
• Netapp Cloud Backup: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Smi-S Provider: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2020-08-20. Last modified 2026-06-17.