snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of     service (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1081 advisory.

    - fix for CVE-2018-18066 (#1638911)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has net-snmp packages installed that are affected by a vulnerability:

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has net-snmp packages installed that are affected by a vulnerability:

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. (CVE-2018-18066)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2539 advisory.

    The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol     (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from     SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses     SNMP, and a Tk/Perl Management Information Base (MIB) browser.

    Security Fix(es):

    * net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of     service (CVE-2018-18066)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * snmpd crashes due to double-free when freeing security context (BZ#1812938)

    * net-snmp memory leak (BZ#1832223)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

* net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1081 advisory.

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1081 advisory.

    The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol     (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from     SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses     SNMP, and a Tk/Perl Management Information Base (MIB) browser.

    Security Fix(es):

    * net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of     service (CVE-2018-18066)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.(CVE-2018-18066)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the snmp_pdu_parse() mishandles     error codes and is vulnerable to a heap corruption     within the parsing of the PDU prior to the     authentication process. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2018-1000116)

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.(CVE-2018-18066)

  - It was discovered that the snmp_pdu_parse() function     could leave incompletely parsed varBind variables in     the list of variables. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2015-5621)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.i1/4^CVE-2018-18066i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199981	RHEL 6 : net-snmp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
180743	Oracle Linux 7 : net-snmp (ELSA-2020-1081)	Nessus	Oracle Linux Local Security Checks	high
164612	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.17.1)	Nessus	Misc.	critical
164596	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.3)	Nessus	Misc.	critical
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	critical
143955	NewStart CGSL CORE 5.05 / MAIN 5.05 : net-snmp Vulnerability (NS-SA-2020-0094)	Nessus	NewStart CGSL Local Security Checks	high
143896	NewStart CGSL CORE 5.04 / MAIN 5.04 : net-snmp Vulnerability (NS-SA-2020-0063)	Nessus	NewStart CGSL Local Security Checks	high
138620	Amazon Linux 2 : net-snmp (ALAS-2020-1454)	Nessus	Amazon Linux Local Security Checks	high
137413	RHEL 7 : net-snmp (RHSA-2020:2539)	Nessus	Red Hat Local Security Checks	high
135825	Scientific Linux Security Update : net-snmp on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	high
135333	CentOS 7 : net-snmp (RHSA-2020:1081)	Nessus	CentOS Local Security Checks	high
135063	RHEL 7 : net-snmp (RHSA-2020:1081)	Nessus	Red Hat Local Security Checks	high
126844	EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2019-1716)	Nessus	Huawei Local Security Checks	high
124939	EulerOS Virtualization 3.0.1.0 : net-snmp (EulerOS-SA-2019-1436)	Nessus	Huawei Local Security Checks	critical
123900	EulerOS Virtualization 2.5.4 : net-snmp (EulerOS-SA-2019-1214)	Nessus	Huawei Local Security Checks	high
122209	EulerOS 2.0 SP5 : net-snmp (EulerOS-SA-2019-1036)	Nessus	Huawei Local Security Checks	high
122208	EulerOS 2.0 SP3 : net-snmp (EulerOS-SA-2019-1035)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2018-18066

high

Tenable Plugins

high

high

critical

critical

critical

high

high

high

high

high

high

high

high

critical

high

high

high