medium6.5Public exploit code
CVE-2018-18065
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)2018-10-08 · dos · linux
Impact
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Net-Snmp | Net-Snmp | before 5.8 |
| Debian | Debian Linux | Version 9.0 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04, 18.04, 18.10 |
| Netapp | Cloud Backup | All versions |
| Netapp | Hyper Converged Infrastructure | All versions |
| Netapp | Storagegrid Webscale | All versions |
| Netapp | Data Ontap | All versions |
| Netapp | E-Series Santricity Os Controller | from 11.0 through 11.5 |
| Netapp | Solidfire Element Os | All versions |
| Paloaltonetworks | Pan-Os | through 7.1.22 from 7.1.23 through 8.0.15 from 8.0.16 through 8.1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106265
- https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
- https://dumpco.re/blog/net-snmp-5.7.3-remote-dos
- https://security.netapp.com/advisory/ntap-20181107-0001/
- https://security.paloaltonetworks.com/CVE-2018-18065
- https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/
- https://usn.ubuntu.com/3792-1/
- https://usn.ubuntu.com/3792-2/
- https://usn.ubuntu.com/3792-3/
- https://www.debian.org/security/2018/dsa-4314
- https://www.exploit-db.com/exploits/45547/
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- http://www.securityfocus.com/bid/106265
- https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
- https://dumpco.re/blog/net-snmp-5.7.3-remote-dos
- https://security.netapp.com/advisory/ntap-20181107-0001/
- https://security.paloaltonetworks.com/CVE-2018-18065
- https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/
- https://usn.ubuntu.com/3792-1/
- https://usn.ubuntu.com/3792-2/
- https://usn.ubuntu.com/3792-3/
- https://www.debian.org/security/2018/dsa-4314
- https://www.exploit-db.com/exploits/45547/
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html