net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-net-snmpUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-devel | Sep 30, 2024 | Apr 16, 2024 |
| Alpine Linux | — | Upgrade net-snmp | Jun 6, 2024 | Apr 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade net-snmp-debuginfoUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmp-pythonUpgrade net-snmp-guiUpgrade net-snmp-libsUpgrade net-snmp-sysvinit | Dec 5, 2023 | Dec 5, 2023 |
| Debian | — | Upgrade net-snmp | Sep 1, 2022 | Sep 1, 2022 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 31, 2022 | Oct 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade net-snmp-libsUpgrade net-snmpUpgrade python3-net-snmp | Nov 3, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-agent-libs | Oct 11, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-libs | Oct 11, 2022 | Oct 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade net-snmp-libsUpgrade net-snmpUpgrade python3-net-snmp | Nov 15, 2022 | Oct 8, 2022 |
| Oracle_linux | — | Upgrade net-snmp-perlUpgrade net-snmp-develUpgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-agent-libs | Oct 16, 2024 | Jul 1, 2022 |
| Redhat_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-agent-libs-debuginfoNo solution existsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-debugsourceUpgrade net-snmp-perlUpgrade net-snmp-utilsUpgrade python3-net-snmpUpgrade net-snmp-develUpgrade net-snmp-debuginfoUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-perl-debuginfo | Sep 27, 2024 | Apr 16, 2024 |
| Rocky_linux | — | Upgrade net-snmpUpgrade net-snmp-agent-libs-debuginfoUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-debugsourceUpgrade net-snmp-utilsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-agent-libsUpgrade net-snmp-debuginfoUpgrade python3-net-snmpUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-develUpgrade python3-net-snmp-debuginfo | Oct 2, 2024 | Apr 16, 2024 |
| Suse | — | Upgrade net-snmpUpgrade perl-SNMPUpgrade snmp-mibsUpgrade libsnmp40-32bitUpgrade python2-net-snmpUpgrade python3-net-snmpUpgrade net-snmp-devel-32bitUpgrade libsnmp40Upgrade net-snmp-devel | Nov 24, 2022 | Nov 23, 2022 |
| Ubuntu | — | Upgrade libsnmp40Upgrade libsnmp30Upgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp35Upgrade snmpdUpgrade snmpUpgrade snmp (Ubuntu Pro)Upgrade snmpd (Ubuntu Pro)Upgrade libsnmp-perl | Aug 2, 2022 | Aug 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 16, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub