CVE-2018-18065

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Published : 2018-10-08 18:29 Updated : 2019-03-21 16:00

4.0

CVSS Score More info

Score 4.0 / 10

Access vector NETWORK

A vulnerability exploitable with network access means the vulnerable software is bound to the network stack and the attacker does not require local network access or local access. Such a vulnerability is often termed "remotely exploitable". An example of a network attack is an RPC buffer overflow.

Access complexity LOW

Specialized access conditions or extenuating circumstances do not exist. The following are examples:

The affected product typically requires access to a wide range of systems and users, possibly anonymous and untrusted (e.g., Internet-facing web or mail server).
The affected configuration is default or ubiquitous.
The attack can be performed manually and requires little skill or additional information gathering.
The race condition is a lazy one (i.e., it is technically a race but easily winnable).

CPE (33)
Tree view

Vendor	Product	Version	URI
Net-snmp	Net-snmp	5.0	cpe:/a:net-snmp:net-snmp:5.0
Net-snmp	Net-snmp	5.0.1	cpe:/a:net-snmp:net-snmp:5.0.1
Net-snmp	Net-snmp	5.0.2	cpe:/a:net-snmp:net-snmp:5.0.2
Net-snmp	Net-snmp	5.0.3	cpe:/a:net-snmp:net-snmp:5.0.3
Net-snmp	Net-snmp	5.0.4	cpe:/a:net-snmp:net-snmp:5.0.4
Net-snmp	Net-snmp	5.0.5	cpe:/a:net-snmp:net-snmp:5.0.5
Net-snmp	Net-snmp	5.0.6	cpe:/a:net-snmp:net-snmp:5.0.6
Net-snmp	Net-snmp	5.0.7	cpe:/a:net-snmp:net-snmp:5.0.7
Net-snmp	Net-snmp	5.0.8	cpe:/a:net-snmp:net-snmp:5.0.8
Net-snmp	Net-snmp	5.0.9	cpe:/a:net-snmp:net-snmp:5.0.9
Net-snmp	Net-snmp	5.1	cpe:/a:net-snmp:net-snmp:5.1
Net-snmp	Net-snmp	5.1.2	cpe:/a:net-snmp:net-snmp:5.1.2
Net-snmp	Net-snmp	5.2	cpe:/a:net-snmp:net-snmp:5.2
Net-snmp	Net-snmp	5.3	cpe:/a:net-snmp:net-snmp:5.3
Net-snmp	Net-snmp	5.3.0.1	cpe:/a:net-snmp:net-snmp:5.3.0.1
Net-snmp	Net-snmp	5.4	cpe:/a:net-snmp:net-snmp:5.4
Net-snmp	Net-snmp	5.5	cpe:/a:net-snmp:net-snmp:5.5
Net-snmp	Net-snmp	5.6	cpe:/a:net-snmp:net-snmp:5.6
Net-snmp	Net-snmp	5.7	cpe:/a:net-snmp:net-snmp:5.7
Net-snmp	Net-snmp	5.7.1	cpe:/a:net-snmp:net-snmp:5.7.1
Net-snmp	Net-snmp	5.7.2	cpe:/a:net-snmp:net-snmp:5.7.2
Net-snmp	Net-snmp	5.7.3	cpe:/a:net-snmp:net-snmp:5.7.3
Netapp	Cloud Backup	-	cpe:/a:netapp:cloud_backup:-
Netapp	Hyper Converged Infrastructure	-	cpe:/a:netapp:hyper_converged_infrastructure:-
Netapp	Storagegrid Webscale	-	cpe:/a:netapp:storagegrid_webscale:-
Canonical	Ubuntu Linux	12.04	cpe:/o:canonical:ubuntu_linux:12.04::~~esm~~~
Canonical	Ubuntu Linux	14.04	cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~
Canonical	Ubuntu Linux	16.04	cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~
Canonical	Ubuntu Linux	18.04	cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~
Canonical	Ubuntu Linux	18.10	cpe:/o:canonical:ubuntu_linux:18.10
Debian	Debian Linux	9.0	cpe:/o:debian:debian_linux:9.0
Netapp	Data Ontap	-	cpe:/o:netapp:data_ontap:-
Netapp	Solidfire Element Os	-	cpe:/o:netapp:solidfire_element_os:-

Netapp (5) Search CVE
1. Data Ontap (1) Search CVE
  1. -
2. Cloud Backup (1) Search CVE
  1. -
3. Solidfire Element Os (1) Search CVE
  1. -
4. Hyper Converged Infrastructure (1) Search CVE
  1. -
5. Storagegrid Webscale (1) Search CVE
  1. -
Net-snmp (1) Search CVE
1. Net-snmp (22) Search CVE
  1. 5.0
  2. 5.0.1
  3. 5.0.2
  4. 5.0.3
  5. 5.0.4
  6. 5.0.5
  7. 5.0.6
  8. 5.0.7
  9. 5.0.8
  10. 5.0.9
  11. 5.1
  12. 5.1.2
  13. 5.2
  14. 5.3
  15. 5.3.0.1
  16. 5.4
  17. 5.5
  18. 5.6
  19. 5.7
  20. 5.7.1
  21. 5.7.2
  22. 5.7.3
Debian (1) Search CVE
1. Debian Linux (1) Search CVE
  1. 9.0
Canonical (1) Search CVE
1. Ubuntu Linux (5) Search CVE
  1. 12.04
  2. 14.04
  3. 16.04
  4. 18.04
  5. 18.10

CWE

ID	Name	Description	Links
CWE-476	NULL Pointer Dereference	A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.		CVE

References

Source	Link
MISC	https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/
MISC	https://dumpco.re/blog/net-snmp-5.7.3-remote-dos
EXPLOIT-DB	https://www.exploit-db.com/exploits/45547/
DEBIAN	https://www.debian.org/security/2018/dsa-4314
UBUNTU	https://usn.ubuntu.com/3792-1/
UBUNTU	https://usn.ubuntu.com/3792-2/
UBUNTU	https://usn.ubuntu.com/3792-3/
CONFIRM	https://security.netapp.com/advisory/ntap-20181107-0001/
CONFIRM	https://securityadvisories.paloaltonetworks.com/Home/Detail/144

History of changes

Date

Event

2019-03-21 16:00

References changed

1 added

CONFIRM

https://securityadvisories.paloaltonetworks.com/Home/Detail/144

2018-11-26 15:44

CVSS changed

New score : 4.0
No old score

CPEs changed

33 added

cpe:/a:net-snmp:net-snmp:5.0 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.1 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.2 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.3 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.4 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.5 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.6 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.7 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.8 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.0.9 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.1 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.1.2 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.2 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.3 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.3.0.1 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.4 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.5 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.6 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.7 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.7.1 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.7.2 (Net-snmp / Net-snmp)
cpe:/a:net-snmp:net-snmp:5.7.3 (Net-snmp / Net-snmp)
cpe:/a:netapp:cloud_backup:- (Netapp / Cloud Backup)
cpe:/a:netapp:hyper_converged_infrastructure:- (Netapp / Hyper Converged Infrastructure)
cpe:/a:netapp:storagegrid_webscale:- (Netapp / Storagegrid Webscale)
cpe:/o:canonical:ubuntu_linux:12.04::~~esm~~~ (Canonical / Ubuntu Linux)
cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ (Canonical / Ubuntu Linux)
cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ (Canonical / Ubuntu Linux)
cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ (Canonical / Ubuntu Linux)
cpe:/o:canonical:ubuntu_linux:18.10 (Canonical / Ubuntu Linux)
cpe:/o:debian:debian_linux:9.0 (Debian / Debian Linux)
cpe:/o:netapp:data_ontap:- (Netapp / Data Ontap)
cpe:/o:netapp:solidfire_element_os:- (Netapp / Solidfire Element Os)

References changed

8 changed

https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/	UNKNOWN->VENDOR_ADVISORY
https://www.exploit-db.com/exploits/45547/	UNKNOWN->VENDOR_ADVISORY
https://security.netapp.com/advisory/ntap-20181107-0001/	UNKNOWN->VENDOR_ADVISORY
https://usn.ubuntu.com/3792-1/	UNKNOWN->VENDOR_ADVISORY
https://usn.ubuntu.com/3792-3/	UNKNOWN->VENDOR_ADVISORY
https://usn.ubuntu.com/3792-2/	UNKNOWN->VENDOR_ADVISORY
https://dumpco.re/blog/net-snmp-5.7.3-remote-dos	UNKNOWN->VENDOR_ADVISORY
https://www.debian.org/security/2018/dsa-4314	UNKNOWN->VENDOR_ADVISORY