snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-guiUpgrade net-snmp-perlUpgrade net-snmp-pythonUpgrade net-snmp-debuginfoUpgrade net-snmp-sysvinitUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-agent-libs | Jul 21, 2020 | Oct 8, 2018 |
| Centos_linux | — | Upgrade net-snmp-develUpgrade net-snmp-pythonUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-perlUpgrade net-snmp-debuginfoUpgrade net-snmpUpgrade net-snmp-guiUpgrade net-snmp-utils | Apr 1, 2020 | Oct 8, 2018 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-utils | Jul 23, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-libs | Feb 15, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libs | Feb 15, 2019 | Oct 8, 2018 |
| Oracle Solaris | — | Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/addons to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-26 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-27 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/documentation to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3 | May 2, 2019 | Oct 8, 2018 |
| Oracle_linux | — | Upgrade net-snmp-pythonUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-guiUpgrade net-snmp-develUpgrade net-snmp-sysvinit | Oct 5, 2022 | Oct 6, 2015 |
| Redhat_linux | — | Upgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade net-snmp-debuginfoUpgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-guiUpgrade net-snmpUpgrade net-snmp-agent-libsNo solution existsUpgrade net-snmp-python | Apr 1, 2020 | Oct 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub