Red Hat Security AdvisoryRHSA-2020:2539
net-snmp security and bug fix update
Released 2020-06-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) net-snmp-1:5.7.2-43.el7_7.6, net-snmp-agent-libs-1:5.7.2-43.el7_7.6, net-snmp-libs-1:5.7.2-43.el7_7.6 +1
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) net-snmp-devel-1:5.7.2-43.el7_7.6, net-snmp-gui-1:5.7.2-43.el7_7.6, net-snmp-perl-1:5.7.2-43.el7_7.6 +2
- Red Hat Enterprise Linux Server EUS (v. 7.7) net-snmp-1:5.7.2-43.el7_7.6, net-snmp-agent-libs-1:5.7.2-43.el7_7.6, net-snmp-agent-libs-1:5.7.2-43.el7_7.6.ppc +5
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) net-snmp-gui-1:5.7.2-43.el7_7.6, net-snmp-perl-1:5.7.2-43.el7_7.6, net-snmp-python-1:5.7.2-43.el7_7.6 +1
Fixes 1 record
Priority HIGH 72
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting i…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0359 · Published 2018-10-08 · Partial fix CWE-476
