Net Snmp · Net-Snmp · CVE-2022-24805
**Name of the Vulnerable Software and Affected Versions**
net-snmp versions prior to 5.9.2
**Description**
The issue is related to a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB`, which can cause an out-of-bounds memory access. A user with read-only credentials can exploit this issue. To enhance protection, users should use strong SNMPv3 credentials, avoid sharing credentials, and consider restricting access to a given IP address range for those using SNMPv1 or SNMPv2c.
**Recommendations**
For versions prior to 5.9.2, update to version 5.9.2 or later to resolve the issue.
As a temporary workaround, consider using strong SNMPv3 credentials and avoiding the sharing of credentials.
For users who must use SNMPv1 or SNMPv2c, use a complex community string and restrict access to a given IP address range to minimize the risk of exploitation.