Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-44793: handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | net-snmp | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-agent-libs | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-debuginfo | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-devel | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-gui | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-libs | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-perl | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-python | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-sysvinit | 1:5.7.2-49.amzn2.1.2 |
| Amazon Linux · 2 | net-snmp-utils | 1:5.7.2-49.amzn2.1.2 |
Vulnerabilities 1
-
Medium 6.5CVE-2022-44793 EPSS 53%
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Except…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-44793.html