net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-net-snmpalma-upgrade-net-snmp-agent-libsalma-upgrade-net-snmp-develalma-upgrade-net-snmp-libsalma-upgrade-net-snmp-perlalma-upgrade-net-snmp-utilsalma-upgrade-python3-net-snmp | Sep 30, 2024 | Apr 16, 2024 | |
| Alpine Linux | alpine-linux-upgrade-net-snmp | Jun 6, 2024 | Apr 16, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-net-snmpamazon-linux-ami-2-upgrade-net-snmp-agent-libsamazon-linux-ami-2-upgrade-net-snmp-debuginfoamazon-linux-ami-2-upgrade-net-snmp-develamazon-linux-ami-2-upgrade-net-snmp-guiamazon-linux-ami-2-upgrade-net-snmp-libsamazon-linux-ami-2-upgrade-net-snmp-perlamazon-linux-ami-2-upgrade-net-snmp-pythonamazon-linux-ami-2-upgrade-net-snmp-sysvinitamazon-linux-ami-2-upgrade-net-snmp-utils | Dec 5, 2023 | Dec 5, 2023 | |
| Debian | debian-upgrade-net-snmp | Sep 1, 2022 | Sep 1, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-net-analyzer-net-snmp | Oct 31, 2022 | Oct 31, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-net-snmphuawei-euleros-2_0_sp10-upgrade-net-snmp-libshuawei-euleros-2_0_sp10-upgrade-python3-net-snmp | Nov 3, 2022 | Oct 8, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-net-snmphuawei-euleros-2_0_sp5-upgrade-net-snmp-agent-libshuawei-euleros-2_0_sp5-upgrade-net-snmp-develhuawei-euleros-2_0_sp5-upgrade-net-snmp-libshuawei-euleros-2_0_sp5-upgrade-net-snmp-utils | Oct 11, 2022 | Oct 8, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-net-snmphuawei-euleros-2_0_sp8-upgrade-net-snmp-agent-libshuawei-euleros-2_0_sp8-upgrade-net-snmp-develhuawei-euleros-2_0_sp8-upgrade-net-snmp-libshuawei-euleros-2_0_sp8-upgrade-net-snmp-utils | Oct 11, 2022 | Oct 8, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-net-snmphuawei-euleros-2_0_sp9-upgrade-net-snmp-libshuawei-euleros-2_0_sp9-upgrade-python3-net-snmp | Nov 15, 2022 | Oct 8, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-net-snmporacle-linux-upgrade-net-snmp-agent-libsoracle-linux-upgrade-net-snmp-develoracle-linux-upgrade-net-snmp-libsoracle-linux-upgrade-net-snmp-perloracle-linux-upgrade-net-snmp-utilsoracle-linux-upgrade-python3-net-snmp | Oct 16, 2024 | Jul 1, 2022 |
| Redhat_linux | redhat-upgrade-net-snmpredhat-upgrade-net-snmp-agent-libsredhat-upgrade-net-snmp-agent-libs-debuginforedhat-upgrade-net-snmp-debuginforedhat-upgrade-net-snmp-debugsourceredhat-upgrade-net-snmp-develredhat-upgrade-net-snmp-libsredhat-upgrade-net-snmp-libs-debuginforedhat-upgrade-net-snmp-perlredhat-upgrade-net-snmp-perl-debuginforedhat-upgrade-net-snmp-utilsredhat-upgrade-net-snmp-utils-debuginforedhat-upgrade-python3-net-snmpredhat-upgrade-python3-net-snmp-debuginfo | Sep 27, 2024 | Apr 16, 2024 | |
| Rocky_linux | rocky-upgrade-net-snmprocky-upgrade-net-snmp-agent-libsrocky-upgrade-net-snmp-agent-libs-debuginforocky-upgrade-net-snmp-debuginforocky-upgrade-net-snmp-debugsourcerocky-upgrade-net-snmp-develrocky-upgrade-net-snmp-libsrocky-upgrade-net-snmp-libs-debuginforocky-upgrade-net-snmp-perlrocky-upgrade-net-snmp-perl-debuginforocky-upgrade-net-snmp-utilsrocky-upgrade-net-snmp-utils-debuginforocky-upgrade-python3-net-snmprocky-upgrade-python3-net-snmp-debuginfo | Oct 2, 2024 | Apr 16, 2024 | |
| Suse | — | suse-upgrade-libsnmp40suse-upgrade-libsnmp40-32bitsuse-upgrade-net-snmpsuse-upgrade-net-snmp-develsuse-upgrade-net-snmp-devel-32bitsuse-upgrade-perl-snmpsuse-upgrade-python2-net-snmpsuse-upgrade-python3-net-snmpsuse-upgrade-snmp-mibs | Nov 24, 2022 | Nov 23, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libsnmp30ubuntu-pro-upgrade-snmpubuntu-pro-upgrade-snmpdubuntu-upgrade-libsnmp-perlubuntu-upgrade-libsnmp30ubuntu-upgrade-libsnmp35ubuntu-upgrade-libsnmp40ubuntu-upgrade-snmpubuntu-upgrade-snmpd | Aug 2, 2022 | Aug 1, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub