CVE-2022-24808

🗓️ 08 Jul 2022 00:00:00Reported by ubuntu.comType

net-snmp allows NULL pointer dereference via a malformed OID in SET request prior to v5.9.2. Use strong SNMPv3 credentials, avoid sharing, or enhance protection for SNMPv1/SNMPv2c with complex community string and IP restrictions

Reporter	Title	Published	Views	Family All 105
Cvelist	CVE-2022-24808 net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference	16 Apr 202419:52	–	cvelist
Cvelist	CVE-2022-24805 net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.	16 Apr 202419:37	–	cvelist
Vulnrichment	CVE-2022-24808 net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference	16 Apr 202419:52	–	vulnrichment
Vulnrichment	CVE-2022-24805 net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.	16 Apr 202419:37	–	vulnrichment
OSV	CVE-2022-24808	16 Apr 202420:15	–	osv
OSV	CVE-2022-24805	16 Apr 202420:15	–	osv
OSV	Red Hat Security Advisory: net-snmp security update	26 Sep 202423:02	–	osv
OSV	Moderate: net-snmp security update	30 Sep 202414:31	–	osv
OSV	net-snmp - security update	16 Aug 202200:00	–	osv
OSV	Red Hat Security Advisory: net-snmp security update	10 Oct 202400:19	–	osv

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-24808
ubuntu	www.ubuntu.com/security/notices/USN-5543-1
ubuntu	www.ubuntu.com/security/notices/USN-5795-2
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24808
launchpad	www.launchpad.net/bugs/cve/CVE-2022-24808
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-24808

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	net-snmp	5.7.3+dfsg-1.8ubuntu3.7	UNKNOWN
ubuntu	20.04	noarch	net-snmp	5.8+dfsg-2ubuntu2.4	UNKNOWN
ubuntu	22.04	noarch	net-snmp	5.9.1+dfsg-1ubuntu2.2	UNKNOWN
ubuntu	22.10	noarch	net-snmp	5.9.1+dfsg-4ubuntu2	UNKNOWN
ubuntu	14.04	noarch	net-snmp	5.7.2~dfsg-8.1ubuntu3.3+esm3	UNKNOWN
ubuntu	16.04	noarch	net-snmp	5.7.3+dfsg-1ubuntu4.6+esm1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Jul 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS36.5

EPSS0.000