SUSE: Security Advisory (SUSE-SU-2021:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:4191-1 Security update for net-snmp

This update for net-snmp fixes the following issues: - CVE-2020-15862: Make extended MIB read-only bsc1174961...

NET-SNMP Memory Corruption (CVE-2018-1000116)

A memory corruption vulnerability exists in NET-SNMP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

net-snmp:snmp_print_var_fuzzer: Stack-buffer-overflow in sprint_realloc_hinted_integer

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5834687029837824 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpprintvarfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_print_var_fuzzer: Crash in sprint_realloc_hinted_integer

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4553480166047744 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpprintvarfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

net-snmp bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

net-snmp bug fix and enhancement update

An update is available for net-snmp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

ALEA-2021:4439 net-snmp bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in parse_objecttype

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4658956098732032 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in check_utc

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5228380673409024 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpmibfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in asn_realloc_rbuild_string

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5941786955087872 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflo...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in asn_build_string

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6571319773233152 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflo...

NewStart CGSL CORE 5.05 / MAIN 5.05 : net-snmp Vulnerability (NS-SA-2021-0150)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has net-snmp packages installed that are affected by a vulnerability: - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

net-snmp:snmp_config_mem_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4772773835177984 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpconfigmemfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffc9 Crash State: NULL Sanitizer: undefined...

net-snmp:snmp_agent_e2e_fuzzer: Heap-buffer-overflow in get_set_cache

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4680904421801984 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpagente2efuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_config_mem_fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=6204827659534336 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpconfigmemfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffff90 Crash State: unsigned long...

Security Bulletin: Vulnerabilities in net-snmp affect Power Hardware Management Console (CVE-2014-3565)

Summary net-snmp is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2014-3565 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by the improper handling of SNMP traps when started with the "-OQ" option. By...

net-snmp:snmp_api_fuzzer: Crash with empty stacktrace

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5383470403158016 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN...

net-snmp:snmp_api_fuzzer: Crash in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5402726234718208 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6017372729769984 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...