PT-2016-3280 · Net Snmp+3 · Net-Snmp+3

Magnus Klaaborg Stubman · Published 2016-10-06 · Updated 2024-06-15 · CVE-2018-18065

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Net-SNMP versions prior to 5.8 PAN-OS (affected versions not specified)

Description The issue is related to a NULL Pointer Exception bug in the set key function, which can be exploited by an authenticated attacker to cause a Denial of Service via a crafted UDP packet, resulting in the instance crashing. This can be achieved remotely.

Recommendations For Net-SNMP versions prior to 5.8, update to version 5.8 or later to resolve the issue. For PAN-OS, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2019-00433

CVE-2018-18065

DLA-1540-1

DSA-4314-1

OPENSUSE-SU-2018_3381-1

OPENSUSE-SU-2018_3508-1

OPENSUSE-SU-2022:0050-1

OPENSUSE-SU-2022_0050-1

OPENSUSE-SU-2024:11082-1

SUSE-SU-2018:3319-1

SUSE-SU-2018:3333-1

SUSE-SU-2018:3447-1

SUSE-SU-2018:3447-2

SUSE-SU-2018_3319-1

SUSE-SU-2018_3333-1

SUSE-SU-2018_3447-1

SUSE-SU-2018_3447-2

SUSE-SU-2022:0050-1

SUSE-SU-2022:0050-2

SUSE-SU-2022_0050-1

SUSE-SU-2022_0050-2

USN-3792-1

USN-3792-2

USN-3792-3

Affected Products

Net-Snmp

Pan-Os

Suse

Ubuntu

References · 120

• 🔥 https://dumpco.re/blog/net-snmp-5.7.3-remote-dos · Exploit
• 🔥 https://exploit-db.com/exploits/45547 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2018:3333-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00810 · Security Note
• https://bdu.fstec.ru/vul/2022-00793 · Security Note
• https://ubuntu.com/security/CVE-2018-18065 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00797 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-18065 · Security Note
• https://bdu.fstec.ru/vul/2022-00794 · Security Note
• https://bdu.fstec.ru/vul/2022-00813 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/675739 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:3319-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00814 · Security Note
• https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d · Patch
• https://osv.dev/vulnerability/DSA-4314-1 · Vendor Advisory