{"id": "DEBIAN:DLA-1317-1:1D984", "bulletinFamily": "unix", "title": "[SECURITY] [DLA 1317-1] net-snmp security update", "description": "Package : net-snmp\nVersion : 5.7.2.1+dfsg-1+deb8u1\nCVE ID : CVE-2018-1000116\nDebian Bug : #894110\n\nIt was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.\n\nFor Debian 7 "Wheezy", this issue has been fixed in net-snmp version\n5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\n\nRegards,\n\n- -- \n ,''`.\n : :' : Chris Lamb\n `. `'` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "published": "2018-03-26T14:51:23", "modified": "2018-03-26T14:51:23", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201803/msg00020.html", "reporter": "Debian", "references": [], "cvelist": ["CVE-2018-1000116"], "type": "debian", "lastseen": "2019-08-22T02:26:40", "history": [{"bulletin": {"affectedPackage": [{"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "net-snmp_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "net-snmp", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}], "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000116"], "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "description": "Package : net-snmp\nVersion : 5.7.2.1+dfsg-1+deb8u1\nCVE ID : CVE-2018-1000116\nDebian Bug : #894110\n\nIt was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.\n\nFor Debian 7 "Wheezy", this issue has been fixed in net-snmp version\n5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\n\nRegards,\n\n- -- \n ,''`.\n : :' : Chris Lamb\n `. `'` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "edition": 3, "enchantments": {"dependencies": {"modified": "2019-05-30T02:21:35", "references": [{"idList": ["FEDORA_2018-D64806CA1D.NASL", "CENTOS_RHSA-2015-1636.NASL", "PHOTONOS_PHSA-2018-1_0-0126_NET.NASL", "DRAC_2018_03_20.NASL", "FEDORA_2018-AF3BE80746.NASL", "FEDORA_2018-5A5F51753C.NASL", "REDHAT-RHSA-2015-1636.NASL", "ORACLELINUX_ELSA-2015-1636.NASL", "DEBIAN_DSA-4154.NASL", "DEBIAN_DLA-1317.NASL"], "type": "nessus"}, {"idList": ["CVE-2018-1000116"], "type": "cve"}, {"idList": ["DEBIAN:DSA-4154-1:6A12C"], "type": "debian"}, {"idList": ["OPENVAS:1361412562310874264", "OPENVAS:1361412562310891317", "OPENVAS:1361412562310704154", "OPENVAS:1361412562310874214"], "type": "openvas"}]}, "score": {"modified": "2019-05-30T02:21:35", "value": 5.8, "vector": "NONE"}}, "hash": "26a47f5c3d48c920fa956c0e258c4116716e2a5c6ee69191c5034841c8c1fc1a", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "c47aafcdc1a1c12346857230a561695a", "key": "affectedPackage"}, {"hash": "6fe8b98c53e8d099686936732785d471", "key": "reporter"}, {"hash": "4ece1ce00e11587930e6b1797db99518", "key": "title"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "published"}, {"hash": "7e416eb401a5beb632063534a13e68f8", "key": "description"}, {"hash": "2db05c0921aadaf12deab9380bf9655b", "key": "cvelist"}, {"hash": "4c2ef008bea60ce77f1a8c3c9ced9b74", "key": "href"}, {"hash": "6e9552c9bd8e61c8f277c21220160234", "key": "type"}, {"hash": "4913a9178621eadcdf191db17915fbcb", "key": "bulletinFamily"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "modified"}, {"hash": "0b053db5674b87efff89989a8a720df3", "key": "cvss"}], "history": [], "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201803/msg00020.html", "id": "DEBIAN:DLA-1317-1:1D984", "lastseen": "2019-05-30T02:21:35", "modified": "2018-03-26T14:51:23", "objectVersion": "1.3", "published": "2018-03-26T14:51:23", "references": [], "reporter": "Debian", "title": "[SECURITY] [DLA 1317-1] net-snmp security update", "type": "debian", "viewCount": 0}, "differentElements": ["affectedPackage"], "edition": 3, "lastseen": "2019-05-30T02:21:35"}, {"bulletin": {"affectedPackage": [{"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "snmpd_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "snmpd", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "libsnmp-perl_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "libsnmp-perl", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "libsnmp-dev_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "libsnmp-dev", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "net-snmp_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "net-snmp", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "libsnmp-python_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "libsnmp-python", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "libsnmp15-dbg_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "libsnmp15-dbg", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "libsnmp-base_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "libsnmp-base", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "snmp_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "snmp", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "libsnmp15_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "libsnmp15", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}, {"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "tkmib_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "tkmib", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}], "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000116"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "Package : net-snmp\nVersion : 5.7.2.1+dfsg-1+deb8u1\nCVE ID : CVE-2018-1000116\nDebian Bug : #894110\n\nIt was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.\n\nFor Debian 7 "Wheezy", this issue has been fixed in net-snmp version\n5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\n\nRegards,\n\n- -- \n ,''`.\n : :' : Chris Lamb\n `. `'` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "edition": 1, "enchantments": {}, "hash": "a676ca92b4279455dd09a4b1c4bd01db3cdea0928963978b43513778227397f8", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "9269d044b4f53f685ce0353de0144a4c", "key": "affectedPackage"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "6fe8b98c53e8d099686936732785d471", "key": "reporter"}, {"hash": "4ece1ce00e11587930e6b1797db99518", "key": "title"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "published"}, {"hash": "7e416eb401a5beb632063534a13e68f8", "key": "description"}, {"hash": "2db05c0921aadaf12deab9380bf9655b", "key": "cvelist"}, {"hash": "4c2ef008bea60ce77f1a8c3c9ced9b74", "key": "href"}, {"hash": "6e9552c9bd8e61c8f277c21220160234", "key": "type"}, {"hash": "4913a9178621eadcdf191db17915fbcb", "key": "bulletinFamily"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "modified"}], "history": [], "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201803/msg00020.html", "id": "DEBIAN:DLA-1317-1:1D984", "lastseen": "2018-10-16T22:13:04", "modified": "2018-03-26T14:51:23", "objectVersion": "1.3", "published": "2018-03-26T14:51:23", "references": [], "reporter": "Debian", "title": "[SECURITY] [DLA 1317-1] net-snmp security update", "type": "debian", "viewCount": 0}, "differentElements": ["affectedPackage"], "edition": 1, "lastseen": "2018-10-16T22:13:04"}, {"bulletin": {"affectedPackage": [{"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "net-snmp_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "net-snmp", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}], "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000116"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "Package : net-snmp\nVersion : 5.7.2.1+dfsg-1+deb8u1\nCVE ID : CVE-2018-1000116\nDebian Bug : #894110\n\nIt was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.\n\nFor Debian 7 "Wheezy", this issue has been fixed in net-snmp version\n5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\n\nRegards,\n\n- -- \n ,''`.\n : :' : Chris Lamb\n `. `'` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "edition": 2, "enchantments": {"dependencies": {"modified": "2018-10-18T13:48:37", "references": [{"idList": ["FEDORA_2018-D64806CA1D.NASL", "CENTOS_RHSA-2015-1636.NASL", "PHOTONOS_PHSA-2018-1_0-0126_NET.NASL", "DRAC_2018_03_20.NASL", "FEDORA_2018-AF3BE80746.NASL", "FEDORA_2018-5A5F51753C.NASL", "REDHAT-RHSA-2015-1636.NASL", "ORACLELINUX_ELSA-2015-1636.NASL", "DEBIAN_DSA-4154.NASL", "DEBIAN_DLA-1317.NASL"], "type": "nessus"}, {"idList": ["CVE-2018-1000116"], "type": "cve"}, {"idList": ["DEBIAN:DSA-4154-1:6A12C"], "type": "debian"}, {"idList": ["OPENVAS:1361412562310874264", "OPENVAS:1361412562310891317", "OPENVAS:1361412562310704154", "OPENVAS:1361412562310874214"], "type": "openvas"}]}, "score": {"modified": "2018-10-18T13:48:37", "value": 5.0, "vector": "NONE"}}, "hash": "97081641673b0a7e7fa8e8d8aa62704eaad4b0b013320a68532185e63275ddc7", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "c47aafcdc1a1c12346857230a561695a", "key": "affectedPackage"}, {"hash": "6fe8b98c53e8d099686936732785d471", "key": "reporter"}, {"hash": "4ece1ce00e11587930e6b1797db99518", "key": "title"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "published"}, {"hash": "7e416eb401a5beb632063534a13e68f8", "key": "description"}, {"hash": "2db05c0921aadaf12deab9380bf9655b", "key": "cvelist"}, {"hash": "4c2ef008bea60ce77f1a8c3c9ced9b74", "key": "href"}, {"hash": "6e9552c9bd8e61c8f277c21220160234", "key": "type"}, {"hash": "4913a9178621eadcdf191db17915fbcb", "key": "bulletinFamily"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "modified"}], "history": [], "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201803/msg00020.html", "id": "DEBIAN:DLA-1317-1:1D984", "lastseen": "2018-10-18T13:48:37", "modified": "2018-03-26T14:51:23", "objectVersion": "1.3", "published": "2018-03-26T14:51:23", "references": [], "reporter": "Debian", "title": "[SECURITY] [DLA 1317-1] net-snmp security update", "type": "debian", "viewCount": 0}, "differentElements": ["cvss"], "edition": 2, "lastseen": "2018-10-18T13:48:37"}, {"bulletin": {"affectedPackage": [], "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000116"], "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "description": "Package : net-snmp\nVersion : 5.7.2.1+dfsg-1+deb8u1\nCVE ID : CVE-2018-1000116\nDebian Bug : #894110\n\nIt was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.\n\nFor Debian 7 "Wheezy", this issue has been fixed in net-snmp version\n5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\n\nRegards,\n\n- -- \n ,''`.\n : :' : Chris Lamb\n `. `'` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "edition": 4, "enchantments": {"dependencies": {"modified": "2019-08-21T19:22:25", "references": [{"idList": ["FEDORA_2018-D64806CA1D.NASL", "CENTOS_RHSA-2015-1636.NASL", "PHOTONOS_PHSA-2018-1_0-0126_NET.NASL", "DRAC_2018_03_20.NASL", "FEDORA_2018-AF3BE80746.NASL", "FEDORA_2018-5A5F51753C.NASL", "REDHAT-RHSA-2015-1636.NASL", "ORACLELINUX_ELSA-2015-1636.NASL", "DEBIAN_DSA-4154.NASL", "DEBIAN_DLA-1317.NASL"], "type": "nessus"}, {"idList": ["CVE-2018-1000116"], "type": "cve"}, {"idList": ["DEBIAN:DSA-4154-1:6A12C"], "type": "debian"}, {"idList": ["OPENVAS:1361412562310874264", "OPENVAS:1361412562310891317", "OPENVAS:1361412562310704154", "OPENVAS:1361412562310874214"], "type": "openvas"}]}, "score": {"modified": "2019-08-21T19:22:25", "value": 5.8, "vector": "NONE"}}, "hash": "b1f9fa71859408ef3dacbcb32342aab5af789156da6143820e8d7de9e5b7caa5", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "6fe8b98c53e8d099686936732785d471", "key": "reporter"}, {"hash": "4ece1ce00e11587930e6b1797db99518", "key": "title"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "published"}, {"hash": "7e416eb401a5beb632063534a13e68f8", "key": "description"}, {"hash": "2db05c0921aadaf12deab9380bf9655b", "key": "cvelist"}, {"hash": "4c2ef008bea60ce77f1a8c3c9ced9b74", "key": "href"}, {"hash": "6e9552c9bd8e61c8f277c21220160234", "key": "type"}, {"hash": "4913a9178621eadcdf191db17915fbcb", "key": "bulletinFamily"}, {"hash": "4406c131cd8f429ee92339e8d2f30572", "key": "modified"}, {"hash": "0b053db5674b87efff89989a8a720df3", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedPackage"}], "history": [], "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201803/msg00020.html", "id": "DEBIAN:DLA-1317-1:1D984", "lastseen": "2019-08-21T19:22:25", "modified": "2018-03-26T14:51:23", "objectVersion": "1.3", "published": "2018-03-26T14:51:23", "references": [], "reporter": "Debian", "title": "[SECURITY] [DLA 1317-1] net-snmp security update", "type": "debian", "viewCount": 0}, "differentElements": ["affectedPackage"], "edition": 4, "lastseen": "2019-08-21T19:22:25"}], "edition": 5, "hashmap": [{"key": "affectedPackage", "hash": "c47aafcdc1a1c12346857230a561695a"}, {"key": "bulletinFamily", "hash": "4913a9178621eadcdf191db17915fbcb"}, {"key": "cvelist", "hash": "2db05c0921aadaf12deab9380bf9655b"}, {"key": "cvss", "hash": "0b053db5674b87efff89989a8a720df3"}, {"key": "description", "hash": "7e416eb401a5beb632063534a13e68f8"}, {"key": "href", "hash": "4c2ef008bea60ce77f1a8c3c9ced9b74"}, {"key": "modified", "hash": "4406c131cd8f429ee92339e8d2f30572"}, {"key": "published", "hash": "4406c131cd8f429ee92339e8d2f30572"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "6fe8b98c53e8d099686936732785d471"}, {"key": "title", "hash": "4ece1ce00e11587930e6b1797db99518"}, {"key": "type", "hash": "6e9552c9bd8e61c8f277c21220160234"}], "hash": "26a47f5c3d48c920fa956c0e258c4116716e2a5c6ee69191c5034841c8c1fc1a", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2018-1000116"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310891317", "OPENVAS:1361412562310874214", "OPENVAS:1361412562310874264", "OPENVAS:1361412562310704154"]}, {"type": "nessus", "idList": ["FEDORA_2018-D64806CA1D.NASL", "DEBIAN_DLA-1317.NASL", "FEDORA_2018-AF3BE80746.NASL", "FEDORA_2018-5A5F51753C.NASL", "ORACLELINUX_ELSA-2015-1636.NASL", "REDHAT-RHSA-2015-1636.NASL", "DEBIAN_DSA-4154.NASL", "CENTOS_RHSA-2015-1636.NASL", "PHOTONOS_PHSA-2018-1_0-0126_NET.NASL", "EULEROS_SA-2019-1436.NASL"]}, {"type": "debian", "idList": ["DEBIAN:DSA-4154-1:6A12C"]}], "modified": "2019-08-22T02:26:40"}, "score": {"value": 5.8, "vector": "NONE", "modified": "2019-08-22T02:26:40"}, "vulnersScore": 5.8}, "objectVersion": "1.3", "affectedPackage": [{"OS": "Debian", "OSVersion": "7", "arch": "all", "operator": "lt", "packageFilename": "net-snmp_5.4.3~dfsg-2.8+deb7u2_all.deb", "packageName": "net-snmp", "packageVersion": "5.4.3~dfsg-2.8+deb7u2"}], "scheme": null}

{"cve": [{"lastseen": "2019-05-29T18:19:41", "bulletinFamily": "NVD", "description": "NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.", "modified": "2018-03-30T01:29:00", "id": "CVE-2018-1000116", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000116", "published": "2018-03-07T14:29:00", "title": "CVE-2018-1000116", "type": "cve", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2019-05-29T18:32:54", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2018-03-14T00:00:00", "id": "OPENVAS:1361412562310874214", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874214", "title": "Fedora Update for net-snmp FEDORA-2018-d64806ca1d", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_d64806ca1d_net-snmp_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for net-snmp FEDORA-2018-d64806ca1d\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874214\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-03-14 08:41:30 +0100 (Wed, 14 Mar 2018)\");\n script_cve_id(\"CVE-2018-1000116\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for net-snmp FEDORA-2018-d64806ca1d\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'net-snmp'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"net-snmp on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-d64806ca1d\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OIO2AJDLVDV5CQC774CAF6SNIXBFV6F\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"net-snmp\", rpm:\"net-snmp~5.7.3~27.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:09", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2018-03-21T00:00:00", "id": "OPENVAS:1361412562310874264", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874264", "title": "Fedora Update for net-snmp FEDORA-2018-5a5f51753c", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_5a5f51753c_net-snmp_fc26.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for net-snmp FEDORA-2018-5a5f51753c\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874264\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-03-21 15:13:04 +0100 (Wed, 21 Mar 2018)\");\n script_cve_id(\"CVE-2018-1000116\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for net-snmp FEDORA-2018-5a5f51753c\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'net-snmp'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"net-snmp on Fedora 26\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-5a5f51753c\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUEC5ILAK7CIFDZ4B56FOZZHE6HBPHIX\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC26\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC26\")\n{\n\n if ((res = isrpmvuln(pkg:\"net-snmp\", rpm:\"net-snmp~5.7.3~27.fc26\", rls:\"FC26\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:28", "bulletinFamily": "scanner", "description": "It was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.", "modified": "2019-03-18T00:00:00", "published": "2018-03-27T00:00:00", "id": "OPENVAS:1361412562310891317", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310891317", "title": "Debian LTS Advisory ([SECURITY] [DLA 1317-1] net-snmp security update)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: deb_dla_1317.nasl 14270 2019-03-18 14:24:29Z cfischer $\n#\n# Auto-generated from advisory DLA 1317-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License as published by\n# the Free Software Foundation; either version 2 of the License, or\n# (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.891317\");\n script_version(\"$Revision: 14270 $\");\n script_cve_id(\"CVE-2018-1000116\");\n script_name(\"Debian LTS Advisory ([SECURITY] [DLA 1317-1] net-snmp security update)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:24:29 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-03-27 00:00:00 +0200 (Tue, 27 Mar 2018)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://lists.debian.org/debian-lts-announce/2018/03/msg00020.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB7\");\n script_tag(name:\"affected\", value:\"net-snmp on Debian Linux\");\n script_tag(name:\"solution\", value:\"For Debian 7 'Wheezy', this issue has been fixed in net-snmp version\n5.4.3~dfsg-2.8+deb7u2.\n\nWe recommend that you upgrade your net-snmp packages.\");\n script_tag(name:\"summary\", value:\"It was discovered that there was a heap corruption vulnerability in the\nnet-snmp framework which exchanges server management information in a\nnetwork.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"libsnmp-base\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libsnmp-dev\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libsnmp-perl\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libsnmp-python\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libsnmp15\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libsnmp15-dbg\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"snmp\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"snmpd\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"tkmib\", ver:\"5.4.3~dfsg-2.8+deb7u2\", rls:\"DEB7\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-07-04T18:56:23", "bulletinFamily": "scanner", "description": "A heap corruption vulnerability was discovered in net-snmp, a suite of\nSimple Network Management Protocol applications, triggered when parsing\nthe PDU prior to the authentication process. A remote, unauthenticated\nattacker can take advantage of this flaw to crash the snmpd process\n(causing a denial of service) or, potentially, execute arbitrary code\nwith the privileges of the user running snmpd.", "modified": "2019-07-04T00:00:00", "published": "2018-03-28T00:00:00", "id": "OPENVAS:1361412562310704154", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310704154", "title": "Debian Security Advisory DSA 4154-1 (net-snmp - security update)", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Auto-generated from advisory DSA 4154-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License as published by\n# the Free Software Foundation; either version 2 of the License, or\n# (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.704154\");\n script_version(\"2019-07-04T09:25:28+0000\");\n script_cve_id(\"CVE-2015-5621\", \"CVE-2018-1000116\");\n script_name(\"Debian Security Advisory DSA 4154-1 (net-snmp - security update)\");\n script_tag(name:\"last_modification\", value:\"2019-07-04 09:25:28 +0000 (Thu, 04 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2018-03-28 00:00:00 +0200 (Wed, 28 Mar 2018)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://www.debian.org/security/2018/dsa-4154.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB8\");\n script_tag(name:\"affected\", value:\"net-snmp on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the oldstable distribution (jessie), these problems have been fixed\nin version 5.7.2.1+dfsg-1+deb8u1.\n\nFor the stable distribution (stretch), these problems have been fixed\nbefore the initial release.\n\nWe recommend that you upgrade your net-snmp packages.\");\n\n script_xref(name:\"URL\", value:\"https://security-tracker.debian.org/tracker/net-snmp\");\n script_tag(name:\"summary\", value:\"A heap corruption vulnerability was discovered in net-snmp, a suite of\nSimple Network Management Protocol applications, triggered when parsing\nthe PDU prior to the authentication process. A remote, unauthenticated\nattacker can take advantage of this flaw to crash the snmpd process\n(causing a denial of service) or, potentially, execute arbitrary code\nwith the privileges of the user running snmpd.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif(!isnull(res = isdpkgvuln(pkg:\"libsnmp-base\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libsnmp-dev\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libsnmp-perl\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libsnmp30\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libsnmp30-dbg\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"python-netsnmp\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"snmp\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"snmpd\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"snmptrapd\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"tkmib\", ver:\"5.7.2.1+dfsg-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2019-11-01T02:30:45", "bulletinFamily": "scanner", "description": "Security fix for CVE-2018-1000116\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "modified": "2019-11-02T00:00:00", "id": "FEDORA_2018-5A5F51753C.NASL", "href": "https://www.tenable.com/plugins/nessus/108499", "published": "2018-03-21T00:00:00", "title": "Fedora 26 : 1:net-snmp (2018-5a5f51753c)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-5a5f51753c.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(108499);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2019/09/23 11:21:06\");\n\n script_cve_id(\"CVE-2018-1000116\");\n script_xref(name:\"FEDORA\", value:\"2018-5a5f51753c\");\n\n script_name(english:\"Fedora 26 : 1:net-snmp (2018-5a5f51753c)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2018-1000116\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a5f51753c\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected 1:net-snmp package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:1:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:26\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/03/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/21\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^26([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 26\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC26\", reference:\"net-snmp-5.7.3-27.fc26\", epoch:\"1\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"1:net-snmp\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-01T02:31:47", "bulletinFamily": "scanner", "description": "Security fix for CVE-2018-1000116\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "modified": "2019-11-02T00:00:00", "id": "FEDORA_2018-AF3BE80746.NASL", "href": "https://www.tenable.com/plugins/nessus/120708", "published": "2019-01-03T00:00:00", "title": "Fedora 28 : 1:net-snmp (2018-af3be80746)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-af3be80746.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(120708);\n script_version(\"1.2\");\n script_cvs_date(\"Date: 2019/09/23 11:21:08\");\n\n script_cve_id(\"CVE-2018-1000116\");\n script_xref(name:\"FEDORA\", value:\"2018-af3be80746\");\n\n script_name(english:\"Fedora 28 : 1:net-snmp (2018-af3be80746)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2018-1000116\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-af3be80746\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected 1:net-snmp package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:1:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:28\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/03/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/01/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^28([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 28\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC28\", reference:\"net-snmp-5.7.3-36.fc28\", epoch:\"1\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"1:net-snmp\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-01T02:32:10", "bulletinFamily": "scanner", "description": "Security fix for CVE-2018-1000116\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "modified": "2019-11-02T00:00:00", "id": "FEDORA_2018-D64806CA1D.NASL", "href": "https://www.tenable.com/plugins/nessus/108312", "published": "2018-03-14T00:00:00", "title": "Fedora 27 : 1:net-snmp (2018-d64806ca1d)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-d64806ca1d.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(108312);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2019/09/23 11:21:08\");\n\n script_cve_id(\"CVE-2018-1000116\");\n script_xref(name:\"FEDORA\", value:\"2018-d64806ca1d\");\n\n script_name(english:\"Fedora 27 : 1:net-snmp (2018-d64806ca1d)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2018-1000116\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-d64806ca1d\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected 1:net-snmp package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:1:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:27\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/03/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/14\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^27([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 27\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC27\", reference:\"net-snmp-5.7.3-27.fc27\", epoch:\"1\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"1:net-snmp\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2018-03-30T13:02:53", "bulletinFamily": "scanner", "description": "It was discovered that there was a heap corruption vulnerability in the net-snmp framework which exchanges server management information in a network.\n\nFor Debian 7 'Wheezy', this issue has been fixed in net-snmp version 5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\nNOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "modified": "2018-03-29T00:00:00", "published": "2018-03-27T00:00:00", "href": "https://www.tenable.com/plugins/index.php?view=single&id=108607", "id": "DEBIAN_DLA-1317.NASL", "type": "nessus", "title": "Debian DLA-1317-1 : net-snmp security update", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-1317-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n# @DEPRECATED@\n#\n# This script has been deprecated as the associated patch is not\n# currently a recommended security fix.\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(108607);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/03/29 14:24:14\");\n\n script_cve_id(\"CVE-2018-1000116\");\n\n script_name(english:\"Debian DLA-1317-1 : net-snmp security update\");\n script_summary(english:\"Checks dpkg output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that there was a heap corruption vulnerability in\nthe net-snmp framework which exchanges server management information\nin a network.\n\nFor Debian 7 'Wheezy', this issue has been fixed in net-snmp version\n5.7.2.1+dfsg-1+deb8u1.\n\nWe recommend that you upgrade your net-snmp packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2018/03/msg00020.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/net-snmp\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Upgrade the affected packages.\");\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libsnmp-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libsnmp-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libsnmp-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libsnmp-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libsnmp15\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:libsnmp15-dbg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:snmpd\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:tkmib\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/26\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/27\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 Tenable Network Security, Inc.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n# Deprecated.\nexit(0, \"The associated patch is not currently a recommended security fix.\");\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"7.0\", prefix:\"libsnmp-base\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libsnmp-dev\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libsnmp-perl\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libsnmp-python\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libsnmp15\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"libsnmp15-dbg\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"snmp\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"snmpd\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"tkmib\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-11-01T02:09:07", "bulletinFamily": "scanner", "description": "An update of the net package has been released.", "modified": "2019-11-02T00:00:00", "id": "PHOTONOS_PHSA-2018-1_0-0126_NET.NASL", "href": "https://www.tenable.com/plugins/nessus/121825", "published": "2019-02-07T00:00:00", "title": "Photon OS 1.0: Net PHSA-2018-1.0-0126", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.`\n#\n\n# The descriptive text and package checks in this plugin were\n# extracted from VMware Security Advisory PHSA-2018-1.0-0126. The text\n# itself is copyright (C) VMware, Inc.\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(121825);\n script_version(\"1.1\");\n script_cvs_date(\"Date: 2019/02/07 18:14:47\");\n\n script_cve_id(\"CVE-2018-1000116\");\n\n script_name(english:\"Photon OS 1.0: Net PHSA-2018-1.0-0126\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote PhotonOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"An update of the net package has been released.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://github.com/vmware/photon/wiki/Security-Updates-1.0-126.md\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected Linux packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2017-12627\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/04/24\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/04/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/02/07\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:vmware:photonos:net\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:vmware:photonos:1.0\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"PhotonOS Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/PhotonOS/release\", \"Host/PhotonOS/rpm-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/PhotonOS/release\");\nif (isnull(release) || release !~ \"^VMware Photon\") audit(AUDIT_OS_NOT, \"PhotonOS\");\nif (release !~ \"^VMware Photon (?:Linux|OS) 1\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"PhotonOS 1.0\");\n\nif (!get_kb_item(\"Host/PhotonOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"PhotonOS\", cpu);\n\nflag = 0;\n\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"net-snmp-5.7.3-5.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"net-snmp-debuginfo-5.7.3-5.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"net-snmp-devel-5.7.3-5.ph1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"net\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-01T02:15:28", "bulletinFamily": "scanner", "description": "Updated net-snmp packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe net-snmp packages provide various libraries and tools for the\nSimple Network Management Protocol (SNMP), including an SNMP library,\nan extensible agent, tools for requesting or setting information from\nSNMP agents, tools for generating and handling SNMP traps, a version\nof the netstat command which uses SNMP, and a Tk/Perl Management\nInformation Base (MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A\nremote, unauthenticated attacker could use this flaw to crash snmpd\nor, potentially, execute arbitrary code on the system with the\nprivileges of the user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China\nfor reporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.", "modified": "2019-11-02T00:00:00", "id": "CENTOS_RHSA-2015-1636.NASL", "href": "https://www.tenable.com/plugins/nessus/85464", "published": "2015-08-18T00:00:00", "title": "CentOS 6 / 7 : net-snmp (CESA-2015:1636)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:1636 and \n# CentOS Errata and Security Advisory 2015:1636 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85464);\n script_version(\"2.7\");\n script_cvs_date(\"Date: 2019/10/02 15:30:20\");\n\n script_cve_id(\"CVE-2015-5621\", \"CVE-2018-1000116\");\n script_xref(name:\"RHSA\", value:\"2015:1636\");\n\n script_name(english:\"CentOS 6 / 7 : net-snmp (CESA-2015:1636)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated net-snmp packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe net-snmp packages provide various libraries and tools for the\nSimple Network Management Protocol (SNMP), including an SNMP library,\nan extensible agent, tools for requesting or setting information from\nSNMP agents, tools for generating and handling SNMP traps, a version\nof the netstat command which uses SNMP, and a Tk/Perl Management\nInformation Base (MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A\nremote, unauthenticated attacker could use this flaw to crash snmpd\nor, potentially, execute arbitrary code on the system with the\nprivileges of the user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China\nfor reporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2015-August/021335.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?214d8632\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2015-August/021338.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?41f6eed2\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected net-snmp packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-agent-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-gui\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-sysvinit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:net-snmp-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/19\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/18\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(6|7)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 6.x / 7.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-6\", reference:\"net-snmp-5.5-54.el6_7.1\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"net-snmp-devel-5.5-54.el6_7.1\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"net-snmp-libs-5.5-54.el6_7.1\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"net-snmp-perl-5.5-54.el6_7.1\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"net-snmp-python-5.5-54.el6_7.1\")) flag++;\nif (rpm_check(release:\"CentOS-6\", reference:\"net-snmp-utils-5.5-54.el6_7.1\")) flag++;\n\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-agent-libs-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-devel-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-gui-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-libs-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-perl-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-python-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-sysvinit-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"net-snmp-utils-5.7.2-20.el7_1.1\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"net-snmp / net-snmp-agent-libs / net-snmp-devel / net-snmp-gui / etc\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-01T03:14:34", "bulletinFamily": "scanner", "description": "From Red Hat Security Advisory 2015:1636 :\n\nUpdated net-snmp packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe net-snmp packages provide various libraries and tools for the\nSimple Network Management Protocol (SNMP), including an SNMP library,\nan extensible agent, tools for requesting or setting information from\nSNMP agents, tools for generating and handling SNMP traps, a version\nof the netstat command which uses SNMP, and a Tk/Perl Management\nInformation Base (MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A\nremote, unauthenticated attacker could use this flaw to crash snmpd\nor, potentially, execute arbitrary code on the system with the\nprivileges of the user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China\nfor reporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.", "modified": "2019-11-02T00:00:00", "id": "ORACLELINUX_ELSA-2015-1636.NASL", "href": "https://www.tenable.com/plugins/nessus/85492", "published": "2015-08-18T00:00:00", "title": "Oracle Linux 6 / 7 : net-snmp (ELSA-2015-1636)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2015:1636 and \n# Oracle Linux Security Advisory ELSA-2015-1636 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85492);\n script_version(\"2.7\");\n script_cvs_date(\"Date: 2019/09/27 13:00:36\");\n\n script_cve_id(\"CVE-2015-5621\", \"CVE-2018-1000116\");\n script_xref(name:\"RHSA\", value:\"2015:1636\");\n\n script_name(english:\"Oracle Linux 6 / 7 : net-snmp (ELSA-2015-1636)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2015:1636 :\n\nUpdated net-snmp packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe net-snmp packages provide various libraries and tools for the\nSimple Network Management Protocol (SNMP), including an SNMP library,\nan extensible agent, tools for requesting or setting information from\nSNMP agents, tools for generating and handling SNMP traps, a version\nof the netstat command which uses SNMP, and a Tk/Perl Management\nInformation Base (MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A\nremote, unauthenticated attacker could use this flaw to crash snmpd\nor, potentially, execute arbitrary code on the system with the\nprivileges of the user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China\nfor reporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2015-August/005349.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2015-August/005350.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected net-snmp packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-agent-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-gui\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-sysvinit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:net-snmp-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/19\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/18\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(6|7)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 6 / 7\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL6\", reference:\"net-snmp-5.5-54.0.1.el6_7.1\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"net-snmp-devel-5.5-54.0.1.el6_7.1\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"net-snmp-libs-5.5-54.0.1.el6_7.1\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"net-snmp-perl-5.5-54.0.1.el6_7.1\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"net-snmp-python-5.5-54.0.1.el6_7.1\")) flag++;\nif (rpm_check(release:\"EL6\", reference:\"net-snmp-utils-5.5-54.0.1.el6_7.1\")) flag++;\n\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-agent-libs-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-devel-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-gui-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-libs-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-perl-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-python-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-sysvinit-5.7.2-20.el7_1.1\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"net-snmp-utils-5.7.2-20.el7_1.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"net-snmp / net-snmp-agent-libs / net-snmp-devel / net-snmp-gui / etc\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-01T03:21:02", "bulletinFamily": "scanner", "description": "Updated net-snmp packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe net-snmp packages provide various libraries and tools for the\nSimple Network Management Protocol (SNMP), including an SNMP library,\nan extensible agent, tools for requesting or setting information from\nSNMP agents, tools for generating and handling SNMP traps, a version\nof the netstat command which uses SNMP, and a Tk/Perl Management\nInformation Base (MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A\nremote, unauthenticated attacker could use this flaw to crash snmpd\nor, potentially, execute arbitrary code on the system with the\nprivileges of the user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China\nfor reporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.", "modified": "2019-11-02T00:00:00", "id": "REDHAT-RHSA-2015-1636.NASL", "href": "https://www.tenable.com/plugins/nessus/85497", "published": "2015-08-18T00:00:00", "title": "RHEL 6 / 7 : net-snmp (RHSA-2015:1636)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:1636. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(85497);\n script_version(\"2.14\");\n script_cvs_date(\"Date: 2019/10/24 15:35:40\");\n\n script_cve_id(\"CVE-2015-5621\", \"CVE-2018-1000116\");\n script_xref(name:\"RHSA\", value:\"2015:1636\");\n\n script_name(english:\"RHEL 6 / 7 : net-snmp (RHSA-2015:1636)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated net-snmp packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe net-snmp packages provide various libraries and tools for the\nSimple Network Management Protocol (SNMP), including an SNMP library,\nan extensible agent, tools for requesting or setting information from\nSNMP agents, tools for generating and handling SNMP traps, a version\nof the netstat command which uses SNMP, and a Tk/Perl Management\nInformation Base (MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A\nremote, unauthenticated attacker could use this flaw to crash snmpd\nor, potentially, execute arbitrary code on the system with the\nprivileges of the user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China\nfor reporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2015:1636\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-5621\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2018-1000116\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-agent-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-gui\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-sysvinit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:net-snmp-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.2\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/08/19\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/08/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/08/18\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(6|7)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 6.x / 7.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2015:1636\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"net-snmp-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"net-snmp-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"net-snmp-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"net-snmp-debuginfo-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"net-snmp-devel-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", reference:\"net-snmp-libs-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"net-snmp-perl-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"net-snmp-perl-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"net-snmp-perl-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"net-snmp-python-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"net-snmp-python-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"net-snmp-python-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"net-snmp-utils-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"net-snmp-utils-5.5-54.el6_7.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"net-snmp-utils-5.5-54.el6_7.1\")) flag++;\n\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"net-snmp-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"net-snmp-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"net-snmp-agent-libs-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"net-snmp-debuginfo-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"net-snmp-devel-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"net-snmp-gui-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"net-snmp-gui-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"net-snmp-libs-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"net-snmp-perl-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"net-snmp-perl-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"net-snmp-python-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"net-snmp-python-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"net-snmp-sysvinit-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"net-snmp-sysvinit-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"net-snmp-utils-5.7.2-20.el7_1.1\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"net-snmp-utils-5.7.2-20.el7_1.1\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"net-snmp / net-snmp-agent-libs / net-snmp-debuginfo / etc\");\n }\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-01T02:22:28", "bulletinFamily": "scanner", "description": "A heap corruption vulnerability was discovered in net-snmp, a suite of\nSimple Network Management Protocol applications, triggered when\nparsing the PDU prior to the authentication process. A remote,\nunauthenticated attacker can take advantage of this flaw to crash the\nsnmpd process (causing a denial of service) or, potentially, execute\narbitrary code with the privileges of the user running snmpd.", "modified": "2019-11-02T00:00:00", "id": "DEBIAN_DSA-4154.NASL", "href": "https://www.tenable.com/plugins/nessus/108696", "published": "2018-03-29T00:00:00", "title": "Debian DSA-4154-1 : net-snmp - security update", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-4154. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(108696);\n script_version(\"1.5\");\n script_cvs_date(\"Date: 2019/04/05 23:25:05\");\n\n script_cve_id(\"CVE-2015-5621\", \"CVE-2018-1000116\");\n script_xref(name:\"DSA\", value:\"4154\");\n\n script_name(english:\"Debian DSA-4154-1 : net-snmp - security update\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A heap corruption vulnerability was discovered in net-snmp, a suite of\nSimple Network Management Protocol applications, triggered when\nparsing the PDU prior to the authentication process. A remote,\nunauthenticated attacker can take advantage of this flaw to crash the\nsnmpd process (causing a denial of service) or, potentially, execute\narbitrary code with the privileges of the user running snmpd.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=788964\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894110\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/source-package/net-snmp\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/net-snmp\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2018/dsa-4154\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the net-snmp packages.\n\nFor the oldstable distribution (jessie), these problems have been\nfixed in version 5.7.2.1+dfsg-1+deb8u1.\n\nFor the stable distribution (stretch), these problems have been fixed\nbefore the initial release.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:net-snmp\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/29\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"8.0\", prefix:\"libsnmp-base\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libsnmp-dev\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libsnmp-perl\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libsnmp30\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libsnmp30-dbg\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"python-netsnmp\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"snmp\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"snmpd\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"snmptrapd\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"tkmib\", reference:\"5.7.2.1+dfsg-1+deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-09T10:28:12", "bulletinFamily": "scanner", "description": "The remote host is running iDRAC7 or iDRAC8 with a firmware version \nprior to 2.52.52.52 and is therefore affected by multiple \nvulnerabilities.", "modified": "2019-11-02T00:00:00", "id": "DRAC_2018_03_20.NASL", "href": "https://www.tenable.com/plugins/nessus/109208", "published": "2018-04-20T00:00:00", "title": "Dell iDRAC Products Multiple Vulnerabilities (Mar 2018)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(109208);\n script_version(\"1.5\");\n script_cvs_date(\"Date: 2019/11/08\");\n\n script_cve_id(\"CVE-2018-1207\", \"CVE-2018-1211\", \"CVE-2018-1000116\");\n script_bugtraq_id(103694, 103768);\n\n script_name(english:\"Dell iDRAC Products Multiple Vulnerabilities (Mar 2018)\");\n script_summary(english:\"Checks the iDRAC version.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote host is running iDRAC7 or iDRAC8 with a firmware version \nprior to 2.52.52.52 and is therefore affected by multiple \nvulnerabilities.\");\n # http://en.community.dell.com/techcenter/extras/m/white_papers/20485410\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?6063b726\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the iDRAC firmware to 2.52.52.52 or higher.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/03/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/04/20\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/h:dell:remote_access_card\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/h:dell:idrac7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/h:dell:idrac8\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"CGI abuses\");\n\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"drac_detect.nasl\");\n script_require_keys(\"installed_sw/iDRAC\");\n script_require_ports(\"Services/www\", 443);\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"http.inc\");\ninclude(\"install_func.inc\");\n\napp = \"iDRAC\";\nget_install_count(app_name:app, exit_if_zero:TRUE);\n\nport = get_http_port(default:443, embedded:TRUE);\n\ninstall = get_single_install(\n app_name : app,\n port : port,\n exit_if_unknown_ver : TRUE\n);\n\ndir = install['path'];\nversion = install['version'];\nfw_version = install['Firmware Version'];\ninstall_url = build_url(port:port, qs:dir);\n\nif (version !~ \"^(7|8)\")\n audit(AUDIT_WRONG_WEB_SERVER, port, \"Neither iDRAC7 nor iDRAC8 and therefore is not affected\");\n\nfix = '2.52.52.52';\n\nif(ver_compare(ver:fw_version, fix:fix, strict:FALSE) == -1)\n{\n items = make_array(\n \"URL\", install_url,\n \"iDRAC version\", version,\n \"Firmware version\", fw_version,\n \"Fixed version\", fix\n );\n order = make_list(\"URL\", \"iDRAC version\", \"Firmware version\", \"Fixed version\");\n report = report_items_str(report_items:items, ordered_fields:order);\n\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse\n{\n audit(AUDIT_WEB_APP_NOT_AFFECTED, app + version, install_url, fw_version);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "debian": [{"lastseen": "2019-08-22T02:27:37", "bulletinFamily": "unix", "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-4154-1 security@debian.org\nhttps://www.debian.org/security/ Salvatore Bonaccorso\nMarch 28, 2018 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : net-snmp\nCVE ID : CVE-2015-5621 CVE-2018-1000116\nDebian Bug : 788964 894110\n\nA heap corruption vulnerability was discovered in net-snmp, a suite of\nSimple Network Management Protocol applications, triggered when parsing\nthe PDU prior to the authentication process. A remote, unauthenticated\nattacker can take advantage of this flaw to crash the snmpd process\n(causing a denial of service) or, potentially, execute arbitrary code\nwith the privileges of the user running snmpd.\n\nFor the oldstable distribution (jessie), these problems have been fixed\nin version 5.7.2.1+dfsg-1+deb8u1.\n\nFor the stable distribution (stretch), these problems have been fixed\nbefore the initial release.\n\nWe recommend that you upgrade your net-snmp packages.\n\nFor the detailed security status of net-snmp please refer to its\nsecurity tracker page at:\nhttps://security-tracker.debian.org/tracker/net-snmp\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "modified": "2018-03-28T09:21:53", "published": "2018-03-28T09:21:53", "id": "DEBIAN:DSA-4154-1:6A12C", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2018/msg00080.html", "title": "[SECURITY] [DSA 4154-1] net-snmp security update", "type": "debian", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "centos": [{"lastseen": "2019-12-11T18:22:16", "bulletinFamily": "unix", "description": "**CentOS Errata and Security Advisory** CESA-2015:1636\n\n\nThe net-snmp packages provide various libraries and tools for the Simple\nNetwork Management Protocol (SNMP), including an SNMP library, an\nextensible agent, tools for requesting or setting information from SNMP\nagents, tools for generating and handling SNMP traps, a version of the\nnetstat command which uses SNMP, and a Tk/Perl Management Information Base\n(MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A remote,\nunauthenticated attacker could use this flaw to crash snmpd or,\npotentially, execute arbitrary code on the system with the privileges of\nthe user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China for\nreporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.\n\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2015-August/021335.html\nhttp://lists.centos.org/pipermail/centos-announce/2015-August/021338.html\n\n**Affected packages:**\nnet-snmp\nnet-snmp-agent-libs\nnet-snmp-devel\nnet-snmp-gui\nnet-snmp-libs\nnet-snmp-perl\nnet-snmp-python\nnet-snmp-sysvinit\nnet-snmp-utils\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2015-1636.html", "modified": "2015-08-17T16:54:59", "published": "2015-08-17T16:22:33", "href": "http://lists.centos.org/pipermail/centos-announce/2015-August/021335.html", "id": "CESA-2015:1636", "title": "net security update", "type": "centos", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "redhat": [{"lastseen": "2019-12-11T13:33:18", "bulletinFamily": "unix", "description": "The net-snmp packages provide various libraries and tools for the Simple\nNetwork Management Protocol (SNMP), including an SNMP library, an\nextensible agent, tools for requesting or setting information from SNMP\nagents, tools for generating and handling SNMP traps, a version of the\nnetstat command which uses SNMP, and a Tk/Perl Management Information Base\n(MIB) browser.\n\nIt was discovered that the snmp_pdu_parse() function could leave\nincompletely parsed varBind variables in the list of variables. A remote,\nunauthenticated attacker could use this flaw to crash snmpd or,\npotentially, execute arbitrary code on the system with the privileges of\nthe user running snmpd. (CVE-2015-5621)\n\nRed Hat would like to thank Qinghao Tang of QIHU 360 company, China for\nreporting this issue.\n\nAll net-snmp users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue.\n", "modified": "2018-06-06T20:24:24", "published": "2015-08-17T04:00:00", "id": "RHSA-2015:1636", "href": "https://access.redhat.com/errata/RHSA-2015:1636", "type": "redhat", "title": "(RHSA-2015:1636) Moderate: net-snmp security update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}