DSA-5209-1 net-snmp - security update

Bulletin has no description...

PT-2022-37179 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: netsnmp affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details include the netsnmp memdup function and the file snmp api fuzzer.c. Recommendations: At the moment, there is no...

[SECURITY] Fedora 36 Update: net-snmp-5.9.3-1.fc36

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Fedora: Security Advisory for net-snmp (FEDORA-2022-3af7a32fc0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-5543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities fixed in Net-SNMP

Vulnerabilities have been fixed in Net-SNMP. The vulnerabilities allow an authenticated malicious party to cause a denial-of-service or potentially execute arbitrary code execute arbitrary code with the privileges under which Net-SNMP is running. This requires malicious network traffic must be se...

USN-5543-1: Net-SNMP vulnerabilities

Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-5543-1 net-snmp vulnerabilities

Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Net-SNMP vulnerabilities (USN-5543-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5543-1 advisory. Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remot...

The vulnerability of the Net-SNMP software suite arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Net-SNMP software suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Improper Input Validation

net-snmp is vulnerable to improper input validation. The vulnerability exists when SETing malformed OIDs in master agent and subagent simultaneously because the inputs are not properly validated which allows an attacker to bypass validations...

Out-Of-Bounds Write

net-snmp is vulnerable to out of bounds write. The vulnerability exists due to a boundary error in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable. A remote user is able to pass a malformed OID in a SET request, trigger an out-of-bounds write and execute arbitrary code on the target...

NULL Pointer Dereference

net-snmp is vulnerable to null pointer dereference. The vulnerability exists when a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable which allows an attacker to cause a null pointer dereference...

Buffer Overflow

net-snmp is vulnerable to buffer overflow. The vulnerability exists in the handling of the INDEX of NET-SNMP-VACM-MIB which allows an attacker to cause an out-of-bounds memory access...

NULL Pointer Dereference

net-snmp is vulnerable to NULL pointer dereference. The vulnerability exists via a malformed OID in a SET being sent to the nsVacmAccessTable function which allows an attacker to cause an application crash...

Slackware: Security Advisory (SSA:2022-202-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/net-snmp-5.9.3-i586-1slack15.0.txz: Upgraded. This update fixes security issues: A buffer overflow in the handling of the INDEX of...

Slackware Linux 15.0 / current net-snmp Multiple Vulnerabilities (SSA:2022-202-01)

The version of net-snmp installed on the remote host is prior to 5.9.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-202-01 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...

CVE-2022-24808

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users shou...

CVE-2022-24810

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...