CVE-2018-18065
Medium
Description
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Net-snmp
PublishedOct 8, 2018
First seenOct 8, 2018
How to fix
Update
- net-snmp net-snmp5.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| net-snmp net-snmp | v < 5.8 | 5.8 |
| debian debian_linux | 9.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04, 18.10 | — |
| netapp cloud_backup | No range specified | — |
| netapp hyper_converged_infrastructure | No range specified | — |
| netapp storagegrid_webscale | No range specified | — |
| netapp data_ontap | No range specified | — |
| netapp e-series_santricity_os_controller | 11.0 ≤ v ≤ 11.5 | — |
| netapp solidfire_element_os | No range specified | — |
| paloaltonetworks pan-os | v ≤ 7.1.22, 7.1.23 ≤ v ≤ 8.0.15, 8.0.16 ≤ v ≤ 8.1.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.