net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a `SET` request to `NET-SNMP-AGENT-MIB::nsLogTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade net-snmp-perlUpgrade net-snmp-develUpgrade net-snmp-libsUpgrade python3-net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp | Sep 30, 2024 | Apr 16, 2024 |
| Alpine Linux | — | Upgrade net-snmp | Jun 6, 2024 | Apr 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade net-snmp-develUpgrade net-snmp-debuginfoUpgrade net-snmp-perlUpgrade net-snmpUpgrade net-snmp-pythonUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-gui | Dec 5, 2023 | Dec 5, 2023 |
| Debian | — | Upgrade net-snmp | Sep 1, 2022 | Sep 1, 2022 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 31, 2022 | Oct 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-net-snmpUpgrade net-snmp-libsUpgrade net-snmp | Nov 3, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-agent-libs | Oct 11, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-devel | Oct 11, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-libs | Nov 15, 2022 | Oct 8, 2022 |
| Oracle_linux | — | Upgrade net-snmpUpgrade net-snmp-perlUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade python3-net-snmpUpgrade net-snmp-agent-libs | Oct 16, 2024 | Jul 1, 2022 |
| Redhat_linux | — | Upgrade net-snmp-perl-debuginfoUpgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-agent-libs-debuginfoUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-debuginfoUpgrade net-snmp-perlUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-debugsourceUpgrade python3-net-snmp-debuginfoNo solution existsUpgrade net-snmp-libsUpgrade net-snmp-agent-libs | Sep 27, 2024 | Apr 16, 2024 |
| Rocky_linux | — | Upgrade python3-net-snmpUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-agent-libsUpgrade net-snmp-debuginfoUpgrade net-snmp-perlUpgrade net-snmp-debugsourceUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-develUpgrade net-snmp-agent-libs-debuginfoUpgrade net-snmpUpgrade net-snmp-utils-debuginfo | Oct 2, 2024 | Apr 16, 2024 |
| Suse | — | Upgrade libsnmp40-32bitUpgrade net-snmp-devel-32bitUpgrade net-snmp-develUpgrade libsnmp40Upgrade snmp-mibsUpgrade python3-net-snmpUpgrade perl-SNMPUpgrade python2-net-snmpUpgrade net-snmp | Nov 24, 2022 | Nov 23, 2022 |
| Ubuntu | — | Upgrade snmpdUpgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp-perlUpgrade snmpd (Ubuntu Pro)Upgrade libsnmp40Upgrade snmpUpgrade libsnmp35Upgrade libsnmp30Upgrade snmp (Ubuntu Pro) | Aug 2, 2022 | Aug 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub