Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Ubuntu 18.04 LTS USN-3792-1 Critical Net-SNMP Denial of Service

Ubuntu Large Esm H500
Net-SNMP could be made to crash if it received specially crafted network traffic.
=========================================================================Ubuntu Security Notice USN-3792-1
October 15, 2018

net-snmp vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Net-SNMP could be made to crash if it received specially crafted network
traffic.

Software Description:
- net-snmp: SNMP (Simple Network Management Protocol) server and applications

Details:

It was discovered that Net-SNMP incorrectly handled certain certain crafted
packets. A remote attacker could possibly use this issue to cause Net-SNMP
to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libsnmp30                       5.7.3+dfsg-1.8ubuntu3.1

Ubuntu 16.04 LTS:
  libsnmp30                       5.7.3+dfsg-1ubuntu4.2

Ubuntu 14.04 LTS:
  libsnmp30                       5.7.2~dfsg-8.1ubuntu3.3

In general, a standard system update will make all the necessary changes.

References:
  
  CVE-2018-18065

Package Information:
  https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1.8ubuntu3.1
  https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1ubuntu4.2
  https://launchpad.net/ubuntu/+source/net-snmp/5.7.2~dfsg-8.1ubuntu3.3

Ubuntu 18.04 LTS USN-3792-1 Critical Net-SNMP Denial of Service

ubuntu
Calendar Grey October 15, 2018
Dist Ubuntu Esm H88
Debian's DSA-4862-1 alerts users to vulnerabilities within OpenSSH that may result in unauthorized access when exploited.
Net-SNMP could be made to crash if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libsnmp30 5.7.3+dfsg-1.8ubuntu3.1 Ubuntu 16.04 LTS: libsnmp30 5.7.3+dfsg-1ubuntu4.2 Ubuntu 14.04 LTS: libsnmp30 5.7.2~dfsg-8.1ubuntu3.3 In general, a standard system update will make all the necessary changes.

References

CVE-2018-18065

Severity
critical
Lowest
Low
Medium
High
Critical

October 15, 2018

Package Information

https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1.8ubuntu3.1 https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1ubuntu4.2 https://launchpad.net/ubuntu/+source/net-snmp/5.7.2~dfsg-8.1ubuntu3.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here