CVE-2018-18065

Published: 8 October 2018

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
net-snmp Launchpad, Ubuntu, Debian	bionic	Released (5.7.3+dfsg-1.8ubuntu3.1)
	cosmic	Released (5.7.3+dfsg-1.8ubuntu3.18.10.1)
	precise	Released (5.4.3~dfsg-2.4ubuntu1.4)
	trusty	Released (5.7.2~dfsg-8.1ubuntu3.3)
	upstream	Released
	xenial	Released (5.7.3+dfsg-1ubuntu4.2)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18065
https://dumpco.re/blog/net-snmp-5.7.3-remote-dos
https://ubuntu.com/security/notices/USN-3792-1
https://ubuntu.com/security/notices/USN-3792-2
https://ubuntu.com/security/notices/USN-3792-3
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=910638

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›