net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable` can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-agent-libs | Sep 30, 2024 | Apr 16, 2024 |
| Alpine Linux | — | Upgrade net-snmp | Jun 6, 2024 | Apr 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-guiUpgrade net-snmp-perlUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-pythonUpgrade net-snmp-develUpgrade net-snmp-sysvinitUpgrade net-snmp-debuginfo | Dec 5, 2023 | Dec 5, 2023 |
| Debian | — | Upgrade net-snmp | Sep 1, 2022 | Sep 1, 2022 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 31, 2022 | Oct 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade net-snmp-libsUpgrade python3-net-snmpUpgrade net-snmp | Nov 3, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmp | Oct 11, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-libs | Oct 11, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-libs | Nov 15, 2022 | Oct 8, 2022 |
| Oracle_linux | — | Upgrade net-snmp-agent-libsUpgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-perlUpgrade net-snmp-devel | Oct 16, 2024 | Jul 1, 2022 |
| Redhat_linux | — | No solution existsUpgrade net-snmp-debuginfoUpgrade net-snmp-agent-libsUpgrade python3-net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-utils-debuginfoUpgrade net-snmpUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-develUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-debugsourceUpgrade net-snmp-libsUpgrade net-snmp-perlUpgrade net-snmp-agent-libs-debuginfoUpgrade net-snmp-perl-debuginfo | Sep 27, 2024 | Apr 16, 2024 |
| Rocky_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-debugsourceUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-libs-debuginfoUpgrade python3-net-snmpUpgrade net-snmp-debuginfoUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-perl-debuginfoUpgrade net-snmpUpgrade net-snmp-perlUpgrade net-snmp-agent-libs-debuginfo | Oct 2, 2024 | Apr 16, 2024 |
| Suse | — | Upgrade snmp-mibsUpgrade net-snmp-develUpgrade net-snmpUpgrade libsnmp40-32bitUpgrade python3-net-snmpUpgrade net-snmp-devel-32bitUpgrade perl-SNMPUpgrade python2-net-snmpUpgrade libsnmp40 | Nov 24, 2022 | Nov 23, 2022 |
| Ubuntu | — | Upgrade libsnmp30Upgrade libsnmp35Upgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp-perlUpgrade libsnmp40Upgrade snmpdUpgrade snmpd (Ubuntu Pro)Upgrade snmpUpgrade snmp (Ubuntu Pro) | Aug 2, 2022 | Aug 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub