CVE-2018-18066
High
Description
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
SeverityHigh
CVSS7.5
Exploit probability—
ProductNet-snmp
PublishedOct 8, 2018
First seenOct 8, 2018
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- net-snmp net-snmp5.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| net-snmp net-snmp | v < 5.8 | 5.8 |
| netapp cloud_backup | No range specified | — |
| netapp hyper_converged_infrastructure | No range specified | — |
| netapp storagegrid_webscale | No range specified | — |
| netapp data_ontap | No range specified | — |
| netapp e-series_santricity_os_controller | 11.0 ≤ v ≤ 11.5 | — |
| netapp solidfire_element_os | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.