[SECURITY] [DLA 3088-1] net-snmp security update

2022-08-3021:26:32

lists.debian.org

6.5 Medium

CVSS3

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality Impact

Integrity Impact

Availability Impact

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

12.1%

JSON

Debian LTS Advisory DLA-3088-1 [email protected]
https://www.debian.org/lts/security/ Thorsten Alteholz
August 30, 2022 https://wiki.debian.org/LTS

Package : net-snmp
Version : 5.7.3+dfsg-5+deb10u3
CVE ID : CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
CVE-2022-24808 CVE-2022-24809 CVE-2022-24810

Yu Zhang and Nanyu Zhong discovered several vulnerabilities in net-snmp, a
suite of Simple Network Management Protocol applications, which could
result in denial of service or the execution of arbitrary code.

For Debian 10 buster, these problems have been fixed in version
5.7.3+dfsg-5+deb10u3.

We recommend that you upgrade your net-snmp packages.

For the detailed security status of net-snmp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/net-snmp

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10arm64libsnmp30-dbg< 5.7.3+dfsg-5+deb10u3libsnmp30-dbg_5.7.3+dfsg-5+deb10u3_arm64.deb
Debian11amd64libsnmp40-dbgsym< 5.9+dfsg-4+deb11u1libsnmp40-dbgsym_5.9+dfsg-4+deb11u1_amd64.deb
Debian10arm64libsnmp-perl< 5.7.3+dfsg-5+deb10u3libsnmp-perl_5.7.3+dfsg-5+deb10u3_arm64.deb
Debian11s390xlibsnmp40< 5.9+dfsg-4+deb11u1libsnmp40_5.9+dfsg-4+deb11u1_s390x.deb
Debian11armhflibsnmp-dev< 5.9+dfsg-4+deb11u1libsnmp-dev_5.9+dfsg-4+deb11u1_armhf.deb
Debian11amd64snmp-dbgsym< 5.9+dfsg-4+deb11u1snmp-dbgsym_5.9+dfsg-4+deb11u1_amd64.deb
Debian11mipselsnmpd-dbgsym< 5.9+dfsg-4+deb11u1snmpd-dbgsym_5.9+dfsg-4+deb11u1_mipsel.deb
Debian11i386libnetsnmptrapd40< 5.9+dfsg-4+deb11u1libnetsnmptrapd40_5.9+dfsg-4+deb11u1_i386.deb
Debian11amd64libsnmp-perl-dbgsym< 5.9+dfsg-4+deb11u1libsnmp-perl-dbgsym_5.9+dfsg-4+deb11u1_amd64.deb
Debian11armellibsnmp-perl-dbgsym< 5.9+dfsg-4+deb11u1libsnmp-perl-dbgsym_5.9+dfsg-4+deb11u1_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	arm64	libsnmp30-dbg	< 5.7.3+dfsg-5+deb10u3	libsnmp30-dbg_5.7.3+dfsg-5+deb10u3_arm64.deb
Debian	11	amd64	libsnmp40-dbgsym	< 5.9+dfsg-4+deb11u1	libsnmp40-dbgsym_5.9+dfsg-4+deb11u1_amd64.deb
Debian	10	arm64	libsnmp-perl	< 5.7.3+dfsg-5+deb10u3	libsnmp-perl_5.7.3+dfsg-5+deb10u3_arm64.deb
Debian	11	s390x	libsnmp40	< 5.9+dfsg-4+deb11u1	libsnmp40_5.9+dfsg-4+deb11u1_s390x.deb
Debian	11	armhf	libsnmp-dev	< 5.9+dfsg-4+deb11u1	libsnmp-dev_5.9+dfsg-4+deb11u1_armhf.deb
Debian	11	amd64	snmp-dbgsym	< 5.9+dfsg-4+deb11u1	snmp-dbgsym_5.9+dfsg-4+deb11u1_amd64.deb
Debian	11	mipsel	snmpd-dbgsym	< 5.9+dfsg-4+deb11u1	snmpd-dbgsym_5.9+dfsg-4+deb11u1_mipsel.deb
Debian	11	i386	libnetsnmptrapd40	< 5.9+dfsg-4+deb11u1	libnetsnmptrapd40_5.9+dfsg-4+deb11u1_i386.deb
Debian	11	amd64	libsnmp-perl-dbgsym	< 5.9+dfsg-4+deb11u1	libsnmp-perl-dbgsym_5.9+dfsg-4+deb11u1_amd64.deb
Debian	11	armel	libsnmp-perl-dbgsym	< 5.9+dfsg-4+deb11u1	libsnmp-perl-dbgsym_5.9+dfsg-4+deb11u1_armel.deb