USN-5795-2

Source
https://ubuntu.com/security/notices/USN-5795-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-5795-2.json
Related
Published
2023-01-16T12:18:48.489891Z
Modified
2023-01-16T12:18:48.489891Z
Summary
net-snmp vulnerabilities
Details

USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause Net-SNMP to crash, resulting in a denial of service.

Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

Affected packages

Ubuntu:Pro:14.04:LTS / net-snmp

Package

Name
net-snmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.7.2~dfsg-8.1ubuntu3.3+esm3

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "libsnmp30": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "snmpd": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "libsnmp-perl": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "tkmib": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "snmp": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "libsnmp-dev": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "python-netsnmp": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "libsnmp-base": "5.7.2~dfsg-8.1ubuntu3.3+esm3"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / net-snmp

Package

Name
net-snmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.7.3+dfsg-1ubuntu4.6+esm1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "libsnmp30": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "snmpd": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "libsnmp-perl": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "tkmib": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "snmptrapd": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "libsnmp-dev": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "snmp": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "python-netsnmp": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "libsnmp-base": "5.7.3+dfsg-1ubuntu4.6+esm1"
        }
    ]
}