ELA-815-1 net-snmp security update
Package : net-snmp
ELA-815-1 net-snmp security update
Version : 5.7.2.1+dfsg-1+deb8u6 (jessie), 5.7.3+dfsg-1.7+deb9u5 (stretch)
Related CVEs :
CVE-2022-44792
CVE-2022-44793
net-snmp, Simple Network Management Protocol agents, were reported to have
a couple of vulnerabilities, resulting in a denial of service.
CVE-2022-44792
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP
has a NULL Pointer Exception bug that can be used by a remote attacker
(who has write access) to cause the instance to crash via a crafted UDP
packet, resulting in Denial of Service.
CVE-2022-44793
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP
has a NULL Pointer Exception bug that can be used by a remote attacker to
cause the instance to crash via a crafted UDP packet, resulting in
Denial of Service.
A net-snmp security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address a couple of vulnerabilities that may result in a denial of service.
