CVE-2018-18066

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Affected products

Centos, Net-Snmp, Red Hat

Net-snmp

< 5.8

Fix

Available

CVSS 3.0

7.5 HIGH

EPSS

4.3% (90th percentile)

Weakness

CWE-476

NVD status

Modified

Published

2018-10-08