handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade python3-net-snmp | May 15, 2023 | Nov 7, 2022 |
| Alpine Linux | — | Upgrade net-snmp | Mar 26, 2024 | Nov 7, 2022 |
| Amazon Linux Ami 2 | — | Upgrade net-snmp-pythonUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-sysvinitUpgrade net-snmpUpgrade net-snmp-guiUpgrade net-snmp-debuginfoUpgrade net-snmp-agent-libsUpgrade net-snmp-utils | Jan 10, 2024 | Nov 7, 2022 |
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-libs-debuginfoUpgrade python3-net-snmpUpgrade net-snmp-perlUpgrade net-snmp-agent-libsUpgrade net-snmpUpgrade net-snmp-utilsUpgrade python3-net-snmp-debuginfoUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-debugsourceUpgrade net-snmp-debuginfoUpgrade net-snmp-develUpgrade net-snmp-agent-libs-debuginfo | May 15, 2023 | Nov 7, 2022 |
| Debian | — | Upgrade net-snmp | Jan 16, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-libs | Mar 20, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-libs | May 8, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-agent-libs | Apr 13, 2023 | Nov 7, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade net-snmpUpgrade python3-net-snmpUpgrade net-snmp-libs | Mar 9, 2023 | Nov 7, 2022 |
| Oracle_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade python3-net-snmpUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-agent-libs | May 17, 2023 | Nov 7, 2022 |
| Redhat_linux | — | No solution existsUpgrade net-snmp-debugsourceUpgrade net-snmp-agent-libsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-perl-debuginfoUpgrade python3-net-snmpUpgrade net-snmp-perlUpgrade net-snmp-agent-libs-debuginfoUpgrade python3-net-snmp-debuginfoUpgrade net-snmp | May 15, 2023 | Nov 7, 2022 |
| Suse | — | Upgrade libsnmp30-32bitUpgrade snmp-mibsUpgrade libsnmp30Upgrade net-snmp-develUpgrade net-snmp-devel-32bitUpgrade libsnmp40Upgrade libsnmp40-32bitUpgrade perl-SNMPUpgrade net-snmpUpgrade python3-net-snmp | Jan 12, 2023 | Nov 7, 2022 |
| Ubuntu | — | Upgrade libsnmp35Upgrade snmpUpgrade libsnmp40Upgrade snmp (Ubuntu Pro)Upgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp30Upgrade snmpdUpgrade snmpd (Ubuntu Pro) | Jan 10, 2023 | Nov 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub