Advisory ROSA-SA-2024-2365

Software: net-snmp 5.8 OS: ROSA Virtualization 2.1 packageevrstring: net-snmp-5.8-27.rv3 CVE-ID: CVE-2022-44792 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP has a NULL Pointer Exception error, which could be used by a remote attacker...

CentOS 9 : net-snmp-5.9.1-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the net-snmp-5.9.1-9.el9 build changelog. - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used ...

CVE-2024-26464

A memory leak vulnerability was found in /net-snmp/apps/snmpvacm.c in the snmpvacm module of net-snmp. This issue could be triggered to cause a denial of service...

PT-2024-21384 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: net-snmp version 5.9.4 Description: The issue is related to a memory leak in the /net-snmp/apps/snmpvacm.c file. Recommendations: For net-snmp version 5.9.4, at the moment, there is no information about a newer version that contains a fix for...

Medium: net-snmp

Issue Overview: handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. CVE-2022-44793 Affected...

Amazon Linux 2 : net-snmp (ALAS-2024-2402)

The version of net-snmp installed on the remote host is prior to 5.7.2-49. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2402 advisory. handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that...

Important Photon OS Security Update - PHSA-2024-4.0-0542

Updates of 'libssh', 'python3-paramiko', 'bluez', 'net-snmp' packages of Photon OS have been released...

SUSE-RU-2024:0029-1 Recommended update for net-snmp

This update for net-snmp fixes the following issues: Update to net-snmp-5.9.4 bsc1214364 jscPED-6435. 5.9.4: - libsnmp: - Remove the SNMPSWIPEMEM macro Remove this macro since it is not used in the Net-SNMP code base. - DISPLAY-HINT fixes - Miscellanious improvements to the transports - Handle...

Amazon Linux 2 : net-snmp (ALAS-2023-2366)

The version of net-snmp installed on the remote host is prior to 5.7.2-49. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2366 advisory. A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an...

net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcat

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5272664167809024 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in __wrap_strlcat

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4585060220928000 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpmibfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcat

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4516406728982528 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

net-snmp bug fix and enhancement update

An update is available for net-snmp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.3...

net-snmp bug fix update

An update is available for net-snmp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The net-snmp packages provide various libraries and tools for the Simple...

NewStart CGSL MAIN 6.06 : net-snmp Multiple Vulnerabilities (NS-SA-2023-0133)

The remote NewStart CGSL host, running version MAIN 6.06, has net-snmp packages installed that are affected by multiple vulnerabilities: - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker w...

Cacti 1.2.24 - Authenticated command injection when using SNMP options Vulnerability

Exploit Title: Cacti 1.2.24 - Authenticated command injection when using SNMP options Exploit Author: Antonio Francesco Sardella Vendor Homepage: https://www.cacti.net/ Software Link: https://www.cacti.net/info/downloads Version: Cacti 1.2.24 Tested on: Cacti 1.2.24 installed on 'php:7.4.33-apach...

PT-2023-36037 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: netsnmp affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details include the crash type and state, which involve the snmp e2e fuzzer.c file and the netsnmp cleanup session function...

net-snmp:snmp_e2e_fuzzer: Heap-double-free in snmp_e2e_fuzzer.c

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5990211341123584 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpe2efuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

Oracle Linux 7 : net-snmp (ELSA-2020-1081)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1081 advisory. - fix for CVE-2018-18066 1638911 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following. Products Confirmed Not Affected No Brocade Fibre Channel products are affected by this vulnerability Solution While Brocade Fabric OS is not vulnerable to this exploit, a security scan may repo...