CVE-2018-18065
Fixed in a distro release EPSS 18%
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Products: net-snmp, debian_linux, canonical ubuntu_linux, netapp cloud_backup, netapp hyper_converged_infrastructure, netapp storagegrid_webscale, netapp data_ontap, netapp e-series_santricity_os_controller, netapp solidfire_element_os, paloaltonetworks pan-os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | net-snmp | 5.8-1 |
| Debian 12 | net-snmp | 5.7.3+dfsg-4 |
| Debian 13 | net-snmp | 5.7.3+dfsg-4 |
| Debian 14 | net-snmp | 5.7.3+dfsg-4 |
| Debian 8 | net-snmp | 5.7.2.1+dfsg-1+deb8u2 |
| Debian 9 | net-snmp | 5.7.3+dfsg-1.7+deb9u1 |
| SUSE Enterprise Storage 4 | net-snmp | 5.7.3-6.3.1 |
| SUSE Enterprise Storage 6 | net-snmp | 5.7.3-10.9.1 |
| SUSE Enterprise Storage 7 | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | net-snmp | 5.7.3-7.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server 12-LTSS | net-snmp | 5.7.2.1-4.9.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | net-snmp | 5.7.3-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | net-snmp | 5.7.3-10.9.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | net-snmp | 5.7.3-6.3.1 |
| SUSE Manager Proxy 4.1 | net-snmp | 5.7.3-10.9.1 |
| SUSE Manager Retail Branch Server 4.1 | net-snmp | 5.7.3-10.9.1 |
| SUSE Manager Server 4.1 | net-snmp | 5.7.3-10.9.1 |
| SUSE OpenStack Cloud 7 | net-snmp | 5.7.3-6.3.1 |
| Ubuntu 14.04 LTS | net-snmp | 5.7.2~dfsg-8.1ubuntu3.3 |
| Ubuntu 16.04 LTS | net-snmp | 5.7.3+dfsg-1ubuntu4.2 |
| Ubuntu 18.04 LTS | net-snmp | 5.7.3+dfsg-1.8ubuntu3.1 |
| openSUSE Leap 15.3 | net-snmp | 5.7.3-10.9.1 |
| openSUSE Leap 15.3 NonFree | opera | 84.0.4316.14-lp153.2.36.1 |
| openSUSE Tumbleweed | net-snmp | 5.9-3.2 |