CVE-2024-27147 Local Privilege Escalation and Remote Code Execution using snmpd

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL...

CVE-2023-52780

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: fix calls to pagepoolgetstats Calling pagepoolgetstats in the mvneta driver without checks leads to kernel crashes. First the page pool is only available if the bm is not used. The page pool is also not allocated whe...

The vulnerability of the snmpd daemon in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a service failure.

The vulnerability of packeIO in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional conditions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2023-24511: Missing Release of Memory after Effective Lifetime

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated causing SNMP requests to time out until snmpd is automatically restarted and potential memory resource...

K12139752: BIG-IP SNMPD vulnerability CVE-2019-6608

Security Advisory Description Under certain conditions, the snmpd process may leak memory on a multi-blade BIG-IP Virtual Clustered Multiprocessing vCMP guest when processing authorized SNMP requests. CVE-2019-6608 Impact Over time, the snmpd process consumes excessive memory, forcing the BIG-IP...

SNMP location XSS vulnerability

Description By including some HTML in the "Location" field of the snmpd configuration of a managed device, an attacker can inject HTML into the LibreNMS "Devices" tab, which then gets rendered when the page is viewed. EDIT: I'm having difficulties developing a proper exploit for this beyond the...

CVE-2022-36310: Use of Inherently Dangerous Function

Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models...

Ubuntu: Security Advisory (USN-5543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-22177

A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service DoS to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This...

CVE-2022-22177

CVE-2022-22177 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an illegal memory vulnerability in the snmpd daemon that can be triggered by crafted SNMP input, causing the snmpd process to segfault or halt and resulting in a sustained Denial of Service until manual restart. A...

CVE-2022-22177: Improper Handling of Exceptional Conditions

A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service DoS to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This...

Juniper Networks Junos OS has an unspecified vulnerability (CNVD-2022-04984)

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. that is specific to the company's hardware devices. A security vulnerability exists in Juniper Networks Junos OS, which stems from an illegal memory vulnerability released in the snmpd daemon of Juniper Networks...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. that is specific to the company's hardware devices. A security vulnerability exists in Juniper Networks Junos OS, which stems from an illegal memory vulnerability released in the snmpd daemon of Juniper Networks...

CVE-2022-22177

A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service DoS to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This...

CVE-2021-0260: Improper Authorization

An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...

RHEL 8 : net-snmp (RHSA-2020:5480)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5480 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: net-snmp security and bug fix update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...

CVE-2020-11698

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server...

Ubuntu 20.04 LTS : Net-SNMP vulnerability (USN-4410-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4410-1 advisory. A double-free bug was discovered in snmpd server. An authenticated user could potentially cause a DoS by sending a crafted request to the server. CVE-2019-20892...