Уязвимость CVE-2022-44792: Информация

Описание

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Важность: MEDIUM (6,5) Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*

      Start including

      5.8

      End including

      5.9.3

      ---

      Конфигурация 2

      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      ---

      Конфигурация 3

      cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

      ---

      Конфигурация 4

      cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

      ---

      Конфигурация 5

      cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

      ---

      Конфигурация 6

      cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

      ---