handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-perlUpgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-agent-libs | May 15, 2023 | Nov 7, 2022 |
| Alpine Linux | — | Upgrade net-snmp | Mar 26, 2024 | Nov 7, 2022 |
| Amazon Linux Ami 2 | — | Upgrade net-snmp-guiUpgrade net-snmp-debuginfoUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmp-pythonUpgrade net-snmp-sysvinitUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmp-libs | Jan 10, 2024 | Nov 7, 2022 |
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-libs-debuginfoUpgrade python3-net-snmpUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-perlUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-debugsourceUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-develUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-debuginfoUpgrade net-snmp-agent-libs-debuginfo | May 15, 2023 | Nov 7, 2022 |
| Debian | — | Upgrade net-snmp | Jan 16, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade net-snmpUpgrade net-snmp-libsUpgrade python3-net-snmp | Mar 20, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-libs | May 8, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-devel | Apr 13, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-net-snmpUpgrade net-snmp-libsUpgrade net-snmp | Mar 9, 2023 | Nov 7, 2022 |
| Oracle_linux | — | Upgrade net-snmp-perlUpgrade net-snmp-develUpgrade net-snmp-libsUpgrade python3-net-snmpUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-agent-libs | May 17, 2023 | Nov 7, 2022 |
| Redhat_linux | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-debugsourceUpgrade net-snmp-libsNo solution existsUpgrade net-snmp-develUpgrade python3-net-snmpUpgrade net-snmpUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-debuginfoUpgrade net-snmp-agent-libs-debuginfoUpgrade net-snmp-perl | May 15, 2023 | Nov 7, 2022 |
| Suse | — | Upgrade perl-SNMPUpgrade python3-net-snmpUpgrade net-snmpUpgrade libsnmp30Upgrade net-snmp-devel-32bitUpgrade net-snmp-develUpgrade snmp-mibsUpgrade libsnmp40Upgrade libsnmp30-32bitUpgrade libsnmp40-32bit | Jan 12, 2023 | Nov 7, 2022 |
| Ubuntu | — | Upgrade libsnmp30Upgrade snmp (Ubuntu Pro)Upgrade libsnmp40Upgrade snmpUpgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp35Upgrade snmpdUpgrade snmpd (Ubuntu Pro) | Jan 10, 2023 | Nov 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub