_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0050-2 advisory.

  - _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that     can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18065)

  - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB     provides the ability to run arbitrary commands as root. (CVE-2020-15862)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0050-1 advisory.

  - _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that     can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18065)

  - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB     provides the ability to run arbitrary commands as root. (CVE-2020-15862)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0050-1 advisory.

  - _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that     can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18065)

  - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB     provides the ability to run arbitrary commands as root. (CVE-2020-15862)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Palo Alto Networks PAN-OS running on the remote host is prior to 7.1.23 or 8.0.x prior to 8.0.16 or 8.1.x prior to 8.1.7.
It is, therefore, affected by a denial of service (DoS) vulnerability in its SNMP library component. An authenticated, remote attacker could exploit this issue to cause the system to stop responding.(CVE-2018-18065

This update for net-snmp fixes the following issues :

Security issues fixed :

  - CVE-2018-18065: _set_key in     agent/helpers/table_container.c had a NULL pointer     Exception bug that can be used by an authenticated     attacker to remotely cause the instance to crash via a     crafted UDP packet, resulting in Denial of Service.
    (bsc#1111122)

Non-security issues fixed :

  - swintst_rpm: Protect against unspecified Group name     (bsc#1102775)

  - Add tsm and tlstm MIBs and the USM security module.
    (bsc#1081164)

  - Fix agentx freezing on timeout (bsc#1027353)

This update was imported from the SUSE:SLE-15:Update update project.

An update of the net package has been released.

Update to net-snmp-5.8.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for net-snmp fixes the following issues :

Security issues fixed :

CVE-2018-18065: _set_key in agent/helpers/table_container.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. (bsc#1111122)

Non-security issues fixed: swintst_rpm: Protect against unspecified Group name (bsc#1102775)

Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)

Fix agentx freezing on timeout (bsc#1027353)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for net-snmp fixes the following issues :

Security issues fixed :

  - CVE-2018-18065: _set_key in     agent/helpers/table_container.c had a NULL pointer     Exception bug that can be used by an authenticated     attacker to remotely cause the instance to crash via a     crafted UDP packet, resulting in Denial of Service.
    (bsc#1111122)

Non-security issues fixed :

  - swintst_rpm: Protect against unspecified Group name     (bsc#1102775)

  - Add tsm and tlstm MIBs and the USM security module.
    (bsc#1081164)

  - Fix agentx freezing on timeout (bsc#1027353)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for net-snmp fixes the following issues :

CVE-2018-18065: _set_key in agent/helpers/table_container.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. (bsc#1111122)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-3792-1 fixed a vulnerability in Net-SNMP. This update provides the corresponding update for Ubuntu 18.10.

It was discovered that Net-SNMP incorrectly handled certain certain crafted packets. A remote attacker could possibly use this issue to cause Net-SNMP to crash, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3792-1 advisory.

    It was discovered that Net-SNMP incorrectly handled certain certain crafted packets. A remote attacker     could possibly use this issue to cause Net-SNMP to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Magnus Klaaborg Stubman discovered a NULL pointer dereference bug in net-snmp, a suite of Simple Network Management Protocol applications, allowing a remote, authenticated attacker to crash the snmpd process (causing a denial of service).

ID	Name	Product	Family	Severity
159133	SUSE SLES15 Security Update : net-snmp (SUSE-SU-2022:0050-2)	Nessus	SuSE Local Security Checks	high
156649	openSUSE 15 Security Update : net-snmp (openSUSE-SU-2022:0050-1)	Nessus	SuSE Local Security Checks	high
156635	SUSE SLED15 / SLES15 Security Update : net-snmp (SUSE-SU-2022:0050-1)	Nessus	SuSE Local Security Checks	high
123557	Palo Alto Networks < 7.1.23 / 8.0.x < 8.0.16 / 8.1.x < 8.1.7 Denial of Service vulnerability (PAN-SA-2019-0007)	Nessus	Palo Alto Local Security Checks	medium
123353	openSUSE Security Update : net-snmp (openSUSE-2019-846)	Nessus	SuSE Local Security Checks	medium
122025	Photon OS 2.0: Net PHSA-2019-2.0-0118	Nessus	PhotonOS Local Security Checks	medium
122017	Photon OS 1.0: Net PHSA-2019-1.0-0203	Nessus	PhotonOS Local Security Checks	medium
120206	Fedora 29 : 1:net-snmp (2018-042156f164)	Nessus	Fedora Local Security Checks	medium
120141	SUSE SLED15 / SLES15 Security Update : net-snmp (SUSE-SU-2018:3333-1)	Nessus	SuSE Local Security Checks	medium
118485	openSUSE Security Update : net-snmp (openSUSE-2018-1313)	Nessus	SuSE Local Security Checks	medium
118456	SUSE SLED12 / SLES12 Security Update : net-snmp (SUSE-SU-2018:3447-1)	Nessus	SuSE Local Security Checks	medium
118379	openSUSE Security Update : net-snmp (openSUSE-2018-1243)	Nessus	SuSE Local Security Checks	medium
118348	SUSE SLES12 Security Update : net-snmp (SUSE-SU-2018:3319-1)	Nessus	SuSE Local Security Checks	medium
118324	Ubuntu 18.10 : Net-SNMP vulnerability (USN-3792-3)	Nessus	Ubuntu Local Security Checks	medium
118143	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Net-SNMP vulnerability (USN-3792-1)	Nessus	Ubuntu Local Security Checks	medium
118071	Debian DSA-4314-1 : net-snmp - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2018-18065

medium

Tenable Plugins

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium