Skip to content
OpenAdvisories
Medium ELSA-2020-1081 1 CVE

Moderate: net-snmp security and bug fix update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Summary

[1:5.7.2-47]
- revert calculation of free space (#1779609)

[1:5.7.2-46]
- fix sha224 and sha384 declaration check (#1774693)

[1:5.7.2-45]
- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)

[1:5.7.2-44]
- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 net-snmp 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-agent-libs 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-devel 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-gui 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-libs 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-perl 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-python 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-sysvinit 1:5.7.2-47.el7
Oracle Linux · 7 net-snmp-utils 1:5.7.2-47.el7

Vulnerabilities 1

  • High 7.5

    snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an u…