CVE-2020-14936

CVE-2020-14936 concerns Contiki-NG 4.4–4.5, where the SNMP agent contains a buffer overflow in snmp_oid_decode_oid() triggered during SNMP request processing. The function does not sufficiently validate target-buffer capacity when writing parsed OID values, risking overwriting memory beyond the i...

CVE-2020-14936

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP requests lack sufficient allocated target-buffer capacity verification when writing parsed OID values. The function snmpoiddecodeoid may overwrite memory areas beyond the provided...

CVE-2020-14935

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. When a bulk get...

CVE-2020-14935

CVE-2020-14935 affects Contiki-NG 4.4–4.5. Buffer overflow in SNMP bulk get response encoding (snmp_engine_get_bulk) due to unchecked input length, overflowing a stack OIDs buffer and potentially overwriting the return address. This could redirect execution to payload data; exploitation details a...

CVE-2020-14934

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. If the number of variables in the request exceeds the...

CVE-2020-14934

CVE-2020-14934 affects Contiki-NG 4.4–4.5 where the SNMP agent’s parsing of SNMP requests does not verify the number of requested variables against the internal buffer capacity. If the request contains more variables than the allocated buffer, a memory write goes out of bounds, potentially overwr...

CVE-2020-14937

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access ...

CVE-2020-14937

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access ...

CVE-2020-14937

The CVE-2020-14937 entry concerns Contiki-NG versions 4.4–4.5 where the SNMP BER encoder/decoder mishandles input/output buffer lengths, causing out-of-bounds reads/writes during BER encoding/decoding. Affected component: Contiki-NG SNMP BER encoder/decoder; root cause: insufficient verification ...

Debian DSA-4746-1 : net-snmp - security update

Several vulnerabilities were discovered in net-snmp, a suite of Simple Network Management Protocol applications, which could lead to privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4746...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

Information disclosure

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

CVE-2020-8232

CVE-2020-8232 affects Ubiquiti EdgeMax EdgeSwitch firmware v1.9.0 (EdgeSwitch ESWH/ESGH). An information disclosure vulnerability allows read-only SNMP users to obtain unauthorized information via SNMP community pages. Exploitation details are not described in the primary documents, but multiple ...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

Cisco Small Business Switch Detection (SNMP)

SNMP based detection of Cisco Small Business Switch devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Small Business Switch Detection Consolidation

Consolidation of Cisco Small Business Switch detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if...

Vulnerabilities fixed in SNMP

Debian has fixed vulnerabilities in SNMP. The vulnerabilities allow a locally authenticated malicious person to obtain elevated privileges. -= Debian =- Debian has made updates to net-snmp available for Debian 10.0 Buster to address the vulnerabilities. You can install the custom packages install...

Debian: Security Advisory (DSA-4746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2020-24361

SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknowntrapexec...

[SECURITY] [DSA 4746-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4746-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 15, 2020 https://www.debian.org/security/faq -...