CVE-2018-18066

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
net-snmpnet-snmp
𝑥
< 5.8
netappcloud_backup
-
netapphyper_converged_infrastructure
-
netappstoragegrid_webscale
-
netappdata_ontap
-
netappe-series_santricity_os_controller
11.0 ≤
𝑥
≤ 11.5
netappsolidfire_element_os
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
net-snmp
bookworm
5.9.3+dfsg-2
fixed
bullseye
5.9+dfsg-4+deb11u1
fixed
bullseye (security)
5.9+dfsg-4+deb11u1
fixed
sid
5.9.4+dfsg-1.1
fixed
trixie
5.9.4+dfsg-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
net-snmp
bionic
not-affected
trusty
not-affected
xenial
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
net-snmp
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-agent-libs
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-devel
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-gui
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-libs
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-perl
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-python
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-sysvinit
RHEL 7
1:5.7.2-47.el7
fixed
net-snmp-utils
RHEL 7
1:5.7.2-47.el7
fixed