handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-perlUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp | May 15, 2023 | Nov 7, 2022 |
| Alpine Linux | — | Upgrade net-snmp | Mar 26, 2024 | Nov 7, 2022 |
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-agent-libsUpgrade net-snmp-libs-debuginfoUpgrade python3-net-snmpUpgrade net-snmp-debugsourceUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-perl-debuginfoUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade net-snmp-debuginfoUpgrade net-snmp-develUpgrade net-snmp-agent-libs-debuginfo | May 15, 2023 | Nov 7, 2022 |
| Debian | — | Upgrade net-snmp | Jan 16, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-libs | Mar 20, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-libs | May 8, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-utils | Apr 13, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade net-snmp-libsUpgrade net-snmpUpgrade python3-net-snmp | Mar 9, 2023 | Nov 7, 2022 |
| Oracle_linux | — | Upgrade net-snmp-perlUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade python3-net-snmpUpgrade net-snmp-develUpgrade net-snmpUpgrade net-snmp-agent-libs | May 17, 2023 | Nov 7, 2022 |
| Redhat_linux | — | Upgrade net-snmp-develUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-perlUpgrade python3-net-snmpUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-utils-debuginfoUpgrade net-snmpUpgrade net-snmp-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-debugsourceUpgrade net-snmp-agent-libs-debuginfo | May 15, 2023 | Nov 7, 2022 |
| Suse | — | Upgrade snmp-mibsUpgrade net-snmp-develUpgrade libsnmp30Upgrade libsnmp40-32bitUpgrade perl-SNMPUpgrade libsnmp40Upgrade libsnmp30-32bitUpgrade net-snmp-devel-32bitUpgrade net-snmpUpgrade python3-net-snmp | Jan 12, 2023 | Nov 7, 2022 |
| Ubuntu | — | Upgrade snmpd (Ubuntu Pro)Upgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp35Upgrade libsnmp40Upgrade snmpUpgrade libsnmp30Upgrade snmpdUpgrade snmp (Ubuntu Pro) | Jan 10, 2023 | Nov 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub