The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0068-1 advisory.

  - handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer     Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash     via a crafted UDP packet, resulting in Denial of Service. (CVE-2022-44792)

  - handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL     Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted     UDP packet, resulting in Denial of Service. (CVE-2022-44793)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer     Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash     via a crafted UDP packet, resulting in Denial of Service. (CVE-2022-44792)

  - handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL     Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted     UDP packet, resulting in Denial of Service. (CVE-2022-44793)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the net package has been released.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5795-1 advisory.

    It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use     these issues to cause Net-SNMP to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer     Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash     via a crafted UDP packet, resulting in Denial of Service. (CVE-2022-44792)

  - handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL     Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted     UDP packet, resulting in Denial of Service. (CVE-2022-44793)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the net-snmp-5.9.1-9.el9 build changelog.

  - handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer     Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash     via a crafted UDP packet, resulting in Denial of Service. (CVE-2022-44792)

  - handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL     Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted     UDP packet, resulting in Denial of Service. (CVE-2022-44793)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2969 advisory.

  - handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer     Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash     via a crafted UDP packet, resulting in Denial of Service. (CVE-2022-44792)

  - handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL     Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted     UDP packet, resulting in Denial of Service. (CVE-2022-44793)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
169984	SUSE SLES12 Security Update : net-snmp (SUSE-SU-2023:0068-1)	Nessus	SuSE Local Security Checks	2023/1/12	2023/7/14	medium
172722	EulerOS 2.0 SP10 : net-snmp (EulerOS-SA-2023-1558)	Nessus	Huawei Local Security Checks	2023/3/19	2023/8/30	medium
204184	Photon OS 4.0: Net PHSA-2023-4.0-0381	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
169711	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Net-SNMP vulnerabilities (USN-5795-1)	Nessus	Ubuntu Local Security Checks	2023/1/9	2024/8/27	medium
172704	EulerOS 2.0 SP10 : net-snmp (EulerOS-SA-2023-1533)	Nessus	Huawei Local Security Checks	2023/3/19	2023/8/30	medium
172343	EulerOS 2.0 SP9 : net-snmp (EulerOS-SA-2023-1453)	Nessus	Huawei Local Security Checks	2023/3/9	2023/8/31	medium
174864	EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2023-1678)	Nessus	Huawei Local Security Checks	2023/4/27	2023/4/27	medium
174871	EulerOS Virtualization 2.9.1 : net-snmp (EulerOS-SA-2023-1644)	Nessus	Huawei Local Security Checks	2023/4/27	2023/4/27	medium
191303	CentOS 9 : net-snmp-5.9.1-9.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	medium
204323	Photon OS 5.0: Net PHSA-2023-5.0-0025	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
176164	AlmaLinux 8 : net-snmp (ALSA-2023:2969)	Nessus	Alma Linux Local Security Checks	2023/5/20	2023/5/20	medium
175246	EulerOS 2.0 SP11 : net-snmp (EulerOS-SA-2023-1764)	Nessus	Huawei Local Security Checks	2023/5/8	2023/5/8	medium
175257	EulerOS 2.0 SP11 : net-snmp (EulerOS-SA-2023-1786)	Nessus	Huawei Local Security Checks	2023/5/8	2023/5/8	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium