CVE-2022-24809
net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
Published 2 y ago · modified 4 mo ago · JSON
Summary
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction (EPSS)
1.11% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- net-snmp net-snmp
Classification
- Weakness
- CWE-476 NULL Pointer Dereference
References
- github.com /net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775 · x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=2103225 · x_transferred
- lists.debian.org /debian-lts-announce/2022/08/msg00020.html · x_transferred
- lists.fedoraproject.org /archives/list/package-announce@lists.fedoraproject.org/message/FX75KKGMO5XMV6JMQZF6KOG3JP · x_transferred
- security.gentoo.org /glsa/202210-29 · x_transferred
- debian.org /security/2022/dsa-5209 · x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=2105242 · x_transferred
Sources
- CVE List: CVE-2022-24809
- NVD: CVE-2022-24809
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.