Skip to content
OpenAdvisories
Medium RHSA-2024:7260 6 CVEs

Red Hat Security Advisory: net-snmp security update

Published Sep 26, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-agent-libs 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-agent-libs-debuginfo 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-debuginfo 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-debugsource 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-devel 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-libs 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-libs-debuginfo 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-perl 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-perl-debuginfo 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-utils 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream net-snmp-utils-debuginfo 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-net-snmp 1:5.9.1-13.el9_4.3
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-net-snmp-debuginfo 1:5.9.1-13.el9_4.3

Vulnerabilities 6

  • Medium 6.5
    CVE-2022-24805

    net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

    net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read-only credentials can…

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-24806

    net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

    net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simul…

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-24807

    net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

    net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable` can cause an out-of-bounds memory access. A user with read-write credent…

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-24808

    net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

    net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a `SET` request to `NET-SNMP-AGENT-MIB::nsLogTable` to cause a NULL pointer dereference. …

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-24809

    net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

    net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2…

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-24810

    net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.

    net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contain…

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2103225
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104766
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104769
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7260.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24805
  • report
    https://access.redhat.com/security/cve/CVE-2022-24806
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24806
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24806
  • report
    https://access.redhat.com/security/cve/CVE-2022-24807
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24807
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24807
  • report
    https://access.redhat.com/security/cve/CVE-2022-24808
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24808
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24808
  • report
    https://access.redhat.com/security/cve/CVE-2022-24809
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24809
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24809
  • report
    https://access.redhat.com/security/cve/CVE-2022-24810
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24810
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24810