Ubuntu 14.04 And 16.04 ESM USN-5795-2 Moderate Net-SNMP DoS
ubuntu
January 16, 2023
Several security issues were fixed in Net-SNMP.
Summary
Several security issues were fixed in Net-SNMP.
Software Description:
- net-snmp: SNMP (Simple Network Management Protocol) server and applications
Details:
USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that Net-SNMP incorrectly handled certain requests. A
remote attacker could possibly use these issues to cause Net-SNMP to crash,
resulting in a denial of service.
Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled
memory operations when processing certain requests. A remote attacker could
use this issue to cause Net-SNMP to crash, resulting in a denial of
service, or possibly execute arbitrary code.
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libsnmp30 5.7.3+dfsg-1ubuntu4.6+esm1 snmp 5.7.3+dfsg-1ubuntu4.6+esm1 snmpd 5.7.3+dfsg-1ubuntu4.6+esm1 Ubuntu 14.04 ESM: libsnmp30 5.7.2~dfsg-8.1ubuntu3.3+esm3 snmp 5.7.2~dfsg-8.1ubuntu3.3+esm3 snmpd 5.7.2~dfsg-8.1ubuntu3.3+esm3 In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-5795-2
https://ubuntu.com/security/notices/USN-5795-1
CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
CVE-2022-24809, CVE-2022-24810, CVE-2022-44792, CVE-2022-44793
PREVIOUS
NEXT
January 16, 2023
Topics Covered
Package Information
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!