Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-24809

Fixed in a distro release EPSS 1%CVSS 6.5

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.

Published 2024-04-16 · CVE record · OSV

Products: net-snmp

Distro releases

ReleasePackageFixed in
AlmaLinux 9net-snmp1:5.9.1-13.el9_4.3
AlmaLinux 9net-snmp-agent-libs1:5.9.1-13.el9_4.3
AlmaLinux 9net-snmp-devel1:5.9.1-13.el9_4.3
AlmaLinux 9net-snmp-libs1:5.9.1-13.el9_4.3
AlmaLinux 9net-snmp-perl1:5.9.1-13.el9_4.3
AlmaLinux 9net-snmp-utils1:5.9.1-13.el9_4.3
AlmaLinux 9python3-net-snmp1:5.9.1-13.el9_4.3
Alpine 3.13net-snmp5.9.3-r0
Alpine 3.14net-snmp5.9.3-r0
Alpine 3.15net-snmp5.9.3-r0
Alpine 3.16net-snmp5.9.3-r0
Alpine 3.17net-snmp5.9.3-r0
Alpine 3.18net-snmp5.9.3-r0
Alpine 3.19net-snmp5.9.3-r0
Alpine 3.20net-snmp5.9.3-r0
Alpine 3.21net-snmp5.9.3-r0
Alpine 3.22net-snmp5.9.3-r0
Alpine 3.23net-snmp5.9.3-r0
Alpine 3.24net-snmp5.9.3-r0
Amazon Linux 2net-snmp1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-agent-libs1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-devel1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-gui1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-libs1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-perl1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-python1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-sysvinit1:5.7.2-49.amzn2.1.1
Amazon Linux 2net-snmp-utils1:5.7.2-49.amzn2.1.1
Debian 10net-snmp5.7.3+dfsg-5+deb10u3
Debian 11net-snmp5.9+dfsg-4+deb11u1
Debian 12net-snmp5.9.3+dfsg-1
Debian 13net-snmp5.9.3+dfsg-1
Debian 14net-snmp5.9.3+dfsg-1
Red Hat Enterprise Linux 9net-snmp1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-agent-libs1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-agent-libs-debuginfo1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-debuginfo1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-debugsource1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-devel1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-libs1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-libs-debuginfo1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-perl1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-perl-debuginfo1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-utils1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9net-snmp-utils-debuginfo1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9python3-net-snmp1:5.9.1-13.el9_4.3
Red Hat Enterprise Linux 9python3-net-snmp-debuginfo1:5.9.1-13.el9_4.3
Red Hat rhel eus 9.2net-snmp1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-agent-libs1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-agent-libs-debuginfo1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-debuginfo1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-debugsource1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-devel1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-libs1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-libs-debuginfo1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-perl1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-perl-debuginfo1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-utils1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2net-snmp-utils-debuginfo1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2python3-net-snmp1:5.9.1-11.el9_2.2
Red Hat rhel eus 9.2python3-net-snmp-debuginfo1:5.9.1-11.el9_2.2
Rocky Linux 9net-snmp1:5.9.1-13.el9_4.3
SUSE Linux Enterprise Micro 5.3net-snmp5.9.3-150300.15.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP3net-snmp5.9.3-150300.15.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP4net-snmp5.9.3-150300.15.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP3net-snmp5.9.3-150300.15.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP4net-snmp5.9.3-150300.15.3.1
SUSE Linux Enterprise Server 12 SP5net-snmp5.9.4-14.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5net-snmp5.9.4-14.3.1
SUSE Linux Enterprise Software Development Kit 12 SP5net-snmp5.9.4-14.3.1
Ubuntu 18.04 LTSnet-snmp5.7.3+dfsg-1.8ubuntu3.7
Ubuntu 20.04 LTSnet-snmp5.8+dfsg-2ubuntu2.4
Ubuntu 22.04 LTSnet-snmp5.9.1+dfsg-1ubuntu2.2
Ubuntu Pro 14.04 LTSnet-snmp5.7.2~dfsg-8.1ubuntu3.3+esm3
Ubuntu Pro 16.04 LTSnet-snmp5.7.3+dfsg-1ubuntu4.6+esm1
openSUSE Leap 15.3net-snmp5.9.3-150300.15.3.1
openSUSE Leap 15.4net-snmp5.9.3-150300.15.3.1
openSUSE Leap 15.5net-snmp5.9.3-150300.15.3.1
openSUSE Leap Micro 5.3net-snmp5.9.3-150300.15.3.1
openSUSE Tumbleweednet-snmp5.9.2-1.1