Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2969
HistoryMay 24, 2023 - 12:00 a.m.

net-snmp security and bug fix update

2023-05-2400:00:00
linux.oracle.com
16

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

73.6%

[5.8-27.0.1]

  • fix error index value when snmpget is used a proxy pass [Orabug: 34905643]
    [1:5.8-27]
  • fix memory leak due of proc file creating (#2105957)
  • fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  • fix memory leak when ipv6 disable set to 1 (#2151537)
  • fix proxy timeout issue (#2160723)
    [1:5.8-26]
  • backport two memory leaks from upstream (#2134635)

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

73.6%