vulnerability

Amazon Linux AMI 2: CVE-2022-24809: Security patch for net-snmp (Multiple Advisories)

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:C/A:N)
Published
Dec 5, 2023
Added
Dec 5, 2023
Modified
May 20, 2026

Description

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.

Solutions

amazon-linux-ami-2-upgrade-net-snmpamazon-linux-ami-2-upgrade-net-snmp-agent-libsamazon-linux-ami-2-upgrade-net-snmp-debuginfoamazon-linux-ami-2-upgrade-net-snmp-develamazon-linux-ami-2-upgrade-net-snmp-guiamazon-linux-ami-2-upgrade-net-snmp-libsamazon-linux-ami-2-upgrade-net-snmp-perlamazon-linux-ami-2-upgrade-net-snmp-pythonamazon-linux-ami-2-upgrade-net-snmp-sysvinitamazon-linux-ami-2-upgrade-net-snmp-utils
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.