vulnerability

CentOS Linux: CVE-2022-44792: Moderate: net-snmp security and bug fix update (Multiple Advisories)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
2022-11-07
Added
2023-05-15
Modified
2025-01-28

Description

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Solution(s)

centos-upgrade-net-snmpcentos-upgrade-net-snmp-agent-libscentos-upgrade-net-snmp-agent-libs-debuginfocentos-upgrade-net-snmp-debuginfocentos-upgrade-net-snmp-debugsourcecentos-upgrade-net-snmp-develcentos-upgrade-net-snmp-libscentos-upgrade-net-snmp-libs-debuginfocentos-upgrade-net-snmp-perlcentos-upgrade-net-snmp-perl-debuginfocentos-upgrade-net-snmp-utilscentos-upgrade-net-snmp-utils-debuginfocentos-upgrade-python3-net-snmpcentos-upgrade-python3-net-snmp-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.