snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-perlUpgrade net-snmp-sysvinitUpgrade net-snmp-debuginfoUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-guiUpgrade net-snmp-pythonUpgrade net-snmp-devel | Jul 21, 2020 | Oct 8, 2018 |
| Centos_linux | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-perlUpgrade net-snmp-debuginfoUpgrade net-snmp-guiUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-python | Apr 1, 2020 | Oct 8, 2018 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-utils | Jul 23, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-libs | Feb 15, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-agent-libs | Feb 15, 2019 | Oct 8, 2018 |
| Oracle Solaris | — | Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-27 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/addons to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-26 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/documentation to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3 | May 2, 2019 | Oct 8, 2018 |
| Oracle_linux | — | Upgrade net-snmp-pythonUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-sysvinitUpgrade net-snmp-guiUpgrade net-snmp-perlUpgrade net-snmp-devel | Oct 5, 2022 | Oct 6, 2015 |
| Redhat_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade net-snmp-develNo solution existsUpgrade net-snmp-sysvinitUpgrade net-snmp-pythonUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-gui | Apr 1, 2020 | Oct 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub