vulnerability

Oracle Linux: CVE-2022-44793: ELSA-2023-2444: net-snmp security and bug fix update (MODERATE) (Multiple Advisories)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
Nov 7, 2022
Added
May 17, 2023
Modified
Dec 3, 2025

Description

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
A flaw was found in Net-SNMP. This issue occurs because the handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP has a NULL Pointer Exception that could allow a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a denial of service.

Solutions

oracle-linux-upgrade-net-snmporacle-linux-upgrade-net-snmp-agent-libsoracle-linux-upgrade-net-snmp-develoracle-linux-upgrade-net-snmp-libsoracle-linux-upgrade-net-snmp-perloracle-linux-upgrade-net-snmp-utilsoracle-linux-upgrade-python3-net-snmp
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.