Skip to content
OpenAdvisories
Medium ALAS2-2020-1454 1 CVE

Moderate: net-snmp security update (Amazon Linux 2)

Published Jul 14, 2020 · Updated Jul 17, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-18066: snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. 1637572: CVE-2018-18066 net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service

Fixed packages 10

ReleasePackageFixed in
Amazon Linux · 2 net-snmp 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-agent-libs 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-debuginfo 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-devel 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-gui 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-libs 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-perl 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-python 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-sysvinit 1:5.7.2-48.amzn2.1
Amazon Linux · 2 net-snmp-utils 1:5.7.2-48.amzn2.1

Vulnerabilities 1

  • High 7.5
    CVE-2018-18066

    snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an u…

    net-snmp Debian

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-18066.html