Lucene search

K
redosRedosROS-20240815-10
HistoryAug 15, 2024 - 12:00 a.m.

ROS-20240815-10

2024-08-1500:00:00
redos.red-soft.ru
5
net-snmp
linux
buffer copying
null pointer
denial of service
system integrity
confidentiality
remote attackers
sql query
cyrus sasl
oid handler
snmp-view-biew-based-acm-mib
net-snmp-agent-mib
net-snmp-vacm-mib

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

8

Confidence

High

Vulnerability of the nsVacmAccessTable() function in the OID Handler component of the Net-SNMP software suite of the Linux operating system is related to dereferencing of the NULL pointer.
of Linux operating system is related to dereferencing of NULL pointer. Exploitation of the vulnerability could
allow an attacker acting remotely to cause a denial of service

Vulnerability of SNMP-VIEW-BIEW-BASED-ACM-MIB::vacmAccessTable() function in OID Handler component of OID Handler set of
of Net-SNMP software of Linux operating system is related to buffer copying without checking the
the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely,
Affect system integrity and confidentiality

Vulnerability of NET-SNMP-AGENT-MIB::nsLogTable() function in the OID Handler component of the Net-SNMP software suite.
of Net-SNMP software set of Linux operating system is related to dereferencing of NULL pointer. Exploitation
of the vulnerability could allow an attacker acting remotely to cause a denial of service

Vulnerability of Cyrus SASL authentication mechanism implementation is related to failure to take measures to protect the structure of a SQL query.
SQL query structure. Exploitation of the vulnerability could allow a remote attacker to execute
arbitrary SQL commands

Vulnerability of NET-SNMP-VACM-MIB() function of Net-SNMP software suite of operating system
Linux is related to buffer copying without input data size verification. Exploitation of the vulnerability could
allow an attacker acting remotely to affect the integrity and confidentiality of a system.
system integrity and confidentiality

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64net-snmp< 5.9.4-1UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

8

Confidence

High