Published: 07/11/2022 Updated: 28/03/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 up to and including 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
net-snmp net-snmp
debian debian linux 10.0
netapp h300s_firmware -
netapp h500s_firmware -
netapp h700s_firmware -
netapp h410s_firmware -

Synopsis Moderate: net-snmp security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for net-snmp is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update ...

Debian Bug report logs - #1024020 net-snmp: CVE-2022-44792 CVE-2022-44793 Package: src:net-snmp; Maintainer for src:net-snmp is Debian SNMP Team <team+snmp@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Sun, 13 Nov 2022 19:39:02 UTC Severity: important Tags: security, upstream Found in v ...

DescriptionThe MITRE CVE dictionary describes this issue as: handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalarsc in Net-SNMP 58 through 593 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-476 https://github.com/net-snmp/net-snmp/issues/474 https://gist.github.com/menglong2234/b7bc13ae1a144f47cc3c95a7ea062428 https://lists.debian.org/debian-lts-announce/2023/01/msg00010.html https://security.netapp.com/advisory/ntap-20230223-0011/https://access.redhat.com/errata/RHSA-2023:2969 https://nvd.nist.gov https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-13 https://access.redhat.com/security/cve/cve-2022-44792

CVE-2022-44792

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect