CVE-2018-18066
Fixed in a distro release EPSS 4%CVSS 7.5
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Products: net-snmp, netapp cloud_backup, netapp hyper_converged_infrastructure, netapp storagegrid_webscale, netapp data_ontap, netapp e-series_santricity_os_controller, netapp solidfire_element_os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | net-snmp | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-agent-libs | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-devel | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-gui | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-libs | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-perl | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-python | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-sysvinit | 1:5.7.2-48.amzn2.1 |
| Amazon Linux 2 | net-snmp-utils | 1:5.7.2-48.amzn2.1 |
| Arch Linux | net-snmp | 5.8-1 |
| Debian 12 | net-snmp | 5.7.3+dfsg-1.1 |
| Debian 13 | net-snmp | 5.7.3+dfsg-1.1 |
| Debian 14 | net-snmp | 5.7.3+dfsg-1.1 |
| Red Hat Enterprise Linux 7 | net-snmp | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-agent-libs | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-debuginfo | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-devel | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-gui | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-libs | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-perl | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-python | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-sysvinit | 1:5.7.2-47.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-utils | 1:5.7.2-47.el7 |
| Red Hat rhel eus 7.7 | net-snmp | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-agent-libs | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-debuginfo | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-devel | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-gui | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-libs | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-perl | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-python | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-sysvinit | 1:5.7.2-43.el7_7.6 |
| Red Hat rhel eus 7.7 | net-snmp-utils | 1:5.7.2-43.el7_7.6 |