Medium ELSA-2023-2444 2 CVEs

Moderate: net-snmp security and bug fix update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[1:5.9.1-9.0.1]
- fix error index value when snmpget is used a proxy pass [Orabug: 35010262]

[1:5.9.1-9]
- fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
- fix memory leak when ipv6 disable set to 1 (#2151540)

[1:5.9.1-8]
- fix default snmpd.conf file content (#2067954)

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 9	net-snmp	1:5.9.1-9.0.1.el9
Oracle Linux · 9	net-snmp-agent-libs	1:5.9.1-9.0.1.el9
Oracle Linux · 9	net-snmp-devel	1:5.9.1-9.0.1.el9
Oracle Linux · 9	net-snmp-libs	1:5.9.1-9.0.1.el9
Oracle Linux · 9	net-snmp-perl	1:5.9.1-9.0.1.el9
Oracle Linux · 9	net-snmp-utils	1:5.9.1-9.0.1.el9
Oracle Linux · 9	python3-net-snmp	1:5.9.1-9.0.1.el9

Vulnerabilities 2

Medium 6.5

CVE-2022-44792 EPSS 52%

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bu…

net-snmp net-snmp net-snmp net-snmp Debian Ubuntu Azure Linux Alpine

Nov 7, 2022
Medium 6.5

CVE-2022-44793 EPSS 53%

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Except…

net-snmp net-snmp net-snmp net-snmp Debian Ubuntu Azure Linux Alpine

Nov 7, 2022