USN-5795-2

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-5795-2

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5795-2.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5795-2

Related

Published

2023-01-16T12:18:48.489891Z

Modified

2023-01-16T12:18:48.489891Z

Summary

net-snmp vulnerabilities

Details

USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause Net-SNMP to crash, resulting in a denial of service.

Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

Affected packages

Ubuntu:Pro:14.04:LTS / net-snmp

Package

Name: net-snmp
Purl: pkg:deb/ubuntu/net-snmp?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.7.2~dfsg-8.1ubuntu3.3+esm3

Affected versions

5.*

5.7.2~dfsg-8ubuntu1

5.7.2~dfsg-8ubuntu2

5.7.2~dfsg-8.1ubuntu1

5.7.2~dfsg-8.1ubuntu2

5.7.2~dfsg-8.1ubuntu3

5.7.2~dfsg-8.1ubuntu3.1

5.7.2~dfsg-8.1ubuntu3.2

5.7.2~dfsg-8.1ubuntu3.3

5.7.2~dfsg-8.1ubuntu3.3+esm1

5.7.2~dfsg-8.1ubuntu3.3+esm2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp-base"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp-dev"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp-dev-dbgsym"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp-perl"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp-perl-dbgsym"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp30"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp30-dbg"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "libsnmp30-dbgsym"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "python-netsnmp"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "python-netsnmp-dbgsym"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "snmp"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "snmp-dbgsym"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "snmpd"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "snmpd-dbgsym"
        },
        {
            "binary_version": "5.7.2~dfsg-8.1ubuntu3.3+esm3",
            "binary_name": "tkmib"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / net-snmp

Package

Name: net-snmp
Purl: pkg:deb/ubuntu/net-snmp?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.7.3+dfsg-1ubuntu4.6+esm1

Affected versions

5.*

5.7.3+dfsg-1ubuntu2

5.7.3+dfsg-1ubuntu3

5.7.3+dfsg-1ubuntu4

5.7.3+dfsg-1ubuntu4.1

5.7.3+dfsg-1ubuntu4.2

5.7.3+dfsg-1ubuntu4.3

5.7.3+dfsg-1ubuntu4.4

5.7.3+dfsg-1ubuntu4.5

5.7.3+dfsg-1ubuntu4.6

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp-base"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp-dev"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp-dev-dbgsym"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp-perl"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp-perl-dbgsym"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp30"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp30-dbg"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "libsnmp30-dbgsym"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "python-netsnmp"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "snmp"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "snmp-dbgsym"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "snmpd"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "snmpd-dbgsym"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "snmptrapd"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "snmptrapd-dbgsym"
        },
        {
            "binary_version": "5.7.3+dfsg-1ubuntu4.6+esm1",
            "binary_name": "tkmib"
        }
    ]
}