net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in get_token

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5855065276547072 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...

net-snmp:snmp_parse_oid_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5385602735407104 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseoidfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000003b3e35 Crash State: NULL Sanitizer: undefined UBSAN...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in getoid

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4817499223883776 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpmibfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_config_fuzzer: Heap-buffer-overflow in read_config

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5986401836466176 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpconfigfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_octet_fuzzer: Crash in node_to_oid

Detailed Report: https://oss-fuzz.com/testcase?key=6012171950620672 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpoctetfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x61900066dcf8 Crash State: nodetooid getmodulenode getnode...

net-snmp:snmp_octet_fuzzer: Heap-buffer-overflow in _add_strings_to_oid

Detailed Report: https://oss-fuzz.com/testcase?key=4632511249514496 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpoctetfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6150000a9302 Crash State: addstringstooid readobjid...

Security Bulletin: IBM Security Privileged Identity Manager vulnerable to local command execution vulnerability (CVE-2020-15862)

Summary IBM Security Privileged Identity Manager has addressed the following vulnerability in net-SNMP component used. Vulnerability Details CVEID: CVE-2020-15862 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by an improper...

EulerOS Virtualization 3.0.2.2 : net-snmp (EulerOS-SA-2021-2149)

According to the version of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE:...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-2149)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2021-1929

Software: net-snmp 5.7.2 OS: Cobalt 7.9 CVE-ID: CVE-2014-2284 CVE-Crit: HIGH CVE-DESC: The Linux implementation of ICMP-MIB in Net-SNMP 5.5 through 5.5.2.1, 5.6.x through 5.6.2.1, and 5.7.x through 5.7.2.1 incorrectly validates input, allowing remote attackers to cause a denial of service via...

SNMP – Simply Not My Problem. Or is it?

TL;DR: Use SNMPv3; long gone is default community strings, hello complex passwords! Remove from the internet, if required, implement a VPN solution to restrict access to only authorised parties. SNMP is a protocol used for the remote management of devices on a network. By remote, we mean access...

SUSE: Security Advisory (SUSE-SU-2015:1524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:1106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0887-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3333-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

net-snmp bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

net-snmp bug fix and enhancement update

An update is available for net-snmp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

SUSE: Security Advisory (SUSE-SU-2018:3319-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...