Net Snmp · Net-Snmp · CVE-2022-44792
**Name of the Vulnerable Software and Affected Versions**
Net-SNMP versions 5.8 through 5.9.3
**Description**
The issue is related to a NULL Pointer Exception bug in the `handle ipDefaultTTL()` function. This bug can be exploited by a remote attacker with write access to cause the instance to crash via a specially crafted UDP packet, resulting in a Denial of Service.
**Recommendations**
For Net-SNMP versions 5.8 through 5.9.3, consider disabling the `handle ipDefaultTTL()` function as a temporary workaround until a patch is available. Restrict access to the UDP protocol to minimize the risk of exploitation. Avoid using the `handle ipDefaultTTL()` function in the affected API endpoint until the issue is resolved.