1772 matches found
SUSE CVE-2022-24806
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...
SUSE CVE-2022-24807
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9....
SUSE CVE-2022-24808
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users shou...
SUSE CVE-2022-44792
handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...
SUSE CVE-2022-44793
handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...
net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcpy
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5420875685167104 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...
net-snmp:snmp_transport_fuzzer: Stack-buffer-overflow in __wrap_strlcpy
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6316417839661056 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmptransportfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2023-1276)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.2 : net-snmp (EulerOS-SA-2023-1276)
According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in net-snmp. This issue occurs due to improper input validation when simultaneously setting malformed OIDs in...
Updated net-snmp packages fix security vulnerability
handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. CVE-2022-44792...
MGASA-2023-0015 Updated net-snmp packages fix security vulnerability
handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. CVE-2022-44792...
Information Disclosure
net-snmp is vulnerable to information disclosure. The package in OpenBSD uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file...
Denial Of Service (DoS)
net-snmp is vulnerable to Denial Of ServiceDoS. The vulnerability exists in handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c via a NULL Pointer Exception bug that which could be used by a remote attacker to cause the instance to crash via a crafted UDP packet...
Denial Of Service (DoS)
net-snmp is vulnerable to Denial Of ServiceDoS. The vulnerability exists in handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c via a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet...
Ubuntu: Security Advisory (USN-5795-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5795-2: Net-SNMP vulnerabilities
USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these...
Ubuntu 16.04 ESM : Net-SNMP vulnerabilities (USN-5795-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5795-2 advisory. USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM...
Debian: Security Advisory (DLA-3270-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3270-1] net-snmp security update
Debian LTS Advisory DLA-3270-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 15, 2023 https://wiki.debian.org/LTS Package : net-snmp Version : 5.7.3+dfsg-5+deb10u4 CVE ID : CVE-2022-44792 CVE-2022-44793 Debian Bug : 1024020 menglong2234 discovered NULL...
