snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-debuginfoUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp-pythonUpgrade net-snmp-perlUpgrade net-snmp-gui | Jul 21, 2020 | Oct 8, 2018 |
| Centos_linux | — | Upgrade net-snmpUpgrade net-snmp-guiUpgrade net-snmp-perlUpgrade net-snmp-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmp-python | Apr 1, 2020 | Oct 8, 2018 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-devel | Jul 23, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-devel | Feb 15, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp-develUpgrade net-snmp-libs | Feb 15, 2019 | Oct 8, 2018 |
| Oracle Solaris | — | Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/documentation to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-27 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-26 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/addons to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3 | May 2, 2019 | Oct 8, 2018 |
| Oracle_linux | — | Upgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-pythonUpgrade net-snmp-sysvinitUpgrade net-snmp-perlUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-guiUpgrade net-snmp-devel | Oct 5, 2022 | Oct 6, 2015 |
| Redhat_linux | — | Upgrade net-snmp-guiUpgrade net-snmp-sysvinitNo solution existsUpgrade net-snmp-pythonUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-debuginfoUpgrade net-snmp-perlUpgrade net-snmp-devel | Apr 1, 2020 | Oct 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub