[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255227

 
 

909

 
 

198741

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2022:4205-1 -- SLES net-snmp, libsnmp40, perl-SNMP, snmp-mibs

ID: oval:org.secpod.oval:def:89047951Date: (C)2022-11-25   (M)2024-04-17
Class: PATCHFamily: unix




This update for net-snmp fixes the following issues: Updated to version 5.9.3 : - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT to the nsVacmAccessTable that can cause a NULL pointer dereference. - CVE-2022-24806: Fixed an improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously. - CVE-2022-24807: Fixed a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. - CVE-2022-24808: Fixed a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference. - CVE-2022-24810: Fixed a malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.

Platform:
SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Desktop 15 SP3
Product:
net-snmp
libsnmp40
perl-SNMP
snmp-mibs
Reference:
SUSE-SU-2022:4205-1
CVE-2022-24805
CVE-2022-24806
CVE-2022-24807
CVE-2022-24808
CVE-2022-24809
CVE-2022-24810
CVE    6
CVE-2022-24805
CVE-2022-24810
CVE-2022-24809
CVE-2022-24808
...
CPE    7
cpe:/a:net-snmp:snmp-mibs
cpe:/a:net-snmp:net-snmp
cpe:/a:perl:perl-SNMP
cpe:/o:suse:suse_linux_enterprise_server:15:sp4
...

© SecPod Technologies