{"id":"CVE-2022-44792","aliases":["ALPINE-CVE-2022-44792","ALSA-2023:2444","ALSA-2023:2969","AZL-11385","AZL-41665","BELL-CVE-2022-44792","DEBIAN-CVE-2022-44792","DLA-3270-1","DLA-4381-1","EUVD-2022-47724","GHSA-pccv-xjc7-m5qv","MGASA-2023-0015","OESA-2023-1010","RHSA-2023:2444","RHSA-2023:2969","SUSE-SU-2023:0068-1","SUSE-SU-2023:0075-1","UBUNTU-CVE-2022-44792","USN-5795-1","USN-5795-2"],"status":"published","title":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a...","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.52054,"percentile":0.98964,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-11-07T00:00:00Z","modified":"2026-11-03T08:03:56Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"net-snmp","fixed_in":["5.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"net-snmp","fixed_in":["5.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"net-snmp","fixed_in":["5.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"net-snmp","fixed_in":["5.9.3-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"net-snmp","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"net-snmp","fixed_in":["5.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"net-snmp","fixed_in":["5.9.3+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"net-snmp","fixed_in":["5.9.3+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"net-snmp","fixed_in":["5.9.3+dfsg-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"net-snmp","fixed_in":["5.7.2~dfsg-8.1ubuntu3.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"net-snmp","fixed_in":["5.7.3+dfsg-1ubuntu4.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"net-snmp","fixed_in":["5.7.3+dfsg-1.8ubuntu3.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"net-snmp","fixed_in":["5.8+dfsg-2ubuntu2.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"net-snmp","fixed_in":["5.9.1+dfsg-1ubuntu2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8"},{"fixed":"5.9.3-r2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"net-snmp-agent-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"net-snmp-agent-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3+dfsg-5+deb10u4"}]}],"versions":["5.7.3+dfsg-5","5.7.3+dfsg-5+deb10u1","5.7.3+dfsg-5+deb10u2","5.7.3+dfsg-5+deb10u3"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+dfsg-4+deb11u2"}]}],"versions":["5.9+dfsg-3","5.9+dfsg-4+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1.2.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-8.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-8.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-5.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-5.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-agent-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-agent-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"net-snmp-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9.1-9.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-agent-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-agent-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"net-snmp-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-agent-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"net-snmp-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.8-27.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3-11.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3-11.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3-11.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-150300.15.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-150300.15.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-150300.15.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-150300.15.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-150300.15.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-150300.15.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2~dfsg-8.1ubuntu3.3+esm3"}]}],"versions":["5.7.2~dfsg-8ubuntu1","5.7.2~dfsg-8ubuntu2","5.7.2~dfsg-8.1ubuntu1","5.7.2~dfsg-8.1ubuntu2","5.7.2~dfsg-8.1ubuntu3","5.7.2~dfsg-8.1ubuntu3.1","5.7.2~dfsg-8.1ubuntu3.2","5.7.2~dfsg-8.1ubuntu3.3","5.7.2~dfsg-8.1ubuntu3.3+esm1","5.7.2~dfsg-8.1ubuntu3.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3+dfsg-1ubuntu4.6+esm1"}]}],"versions":["5.7.3+dfsg-1ubuntu2","5.7.3+dfsg-1ubuntu3","5.7.3+dfsg-1ubuntu4","5.7.3+dfsg-1ubuntu4.1","5.7.3+dfsg-1ubuntu4.2","5.7.3+dfsg-1ubuntu4.3","5.7.3+dfsg-1ubuntu4.4","5.7.3+dfsg-1ubuntu4.5","5.7.3+dfsg-1ubuntu4.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3+dfsg-1.8ubuntu3.8"}]}],"versions":["5.7.3+dfsg-1.7ubuntu1","5.7.3+dfsg-1.8ubuntu1","5.7.3+dfsg-1.8ubuntu2","5.7.3+dfsg-1.8ubuntu3","5.7.3+dfsg-1.8ubuntu3.1","5.7.3+dfsg-1.8ubuntu3.2","5.7.3+dfsg-1.8ubuntu3.3","5.7.3+dfsg-1.8ubuntu3.5","5.7.3+dfsg-1.8ubuntu3.6","5.7.3+dfsg-1.8ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8+dfsg-2ubuntu2.6"}]}],"versions":["5.7.3+dfsg-5ubuntu5","5.7.3+dfsg-5ubuntu6","5.8+dfsg-2ubuntu1","5.8+dfsg-2ubuntu2","5.8+dfsg-2ubuntu2.1","5.8+dfsg-2ubuntu2.2","5.8+dfsg-2ubuntu2.3","5.8+dfsg-2ubuntu2.4","5.8+dfsg-2ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1+dfsg-1ubuntu2.4"}]}],"versions":["5.9+dfsg-3ubuntu2","5.9+dfsg-3ubuntu3","5.9+dfsg-3ubuntu4","5.9.1+dfsg-1ubuntu1","5.9.1+dfsg-1ubuntu2","5.9.1+dfsg-1ubuntu2.1","5.9.1+dfsg-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3+dfsg-1.8ubuntu3.8"}]}],"versions":["5.7.3+dfsg-1.7ubuntu1","5.7.3+dfsg-1.8ubuntu1","5.7.3+dfsg-1.8ubuntu2","5.7.3+dfsg-1.8ubuntu3","5.7.3+dfsg-1.8ubuntu3.1","5.7.3+dfsg-1.8ubuntu3.2","5.7.3+dfsg-1.8ubuntu3.3","5.7.3+dfsg-1.8ubuntu3.5","5.7.3+dfsg-1.8ubuntu3.6","5.7.3+dfsg-1.8ubuntu3.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8+dfsg-2ubuntu2.6"}]}],"versions":["5.7.3+dfsg-5ubuntu5","5.7.3+dfsg-5ubuntu6","5.8+dfsg-2ubuntu1","5.8+dfsg-2ubuntu2","5.8+dfsg-2ubuntu2.1","5.8+dfsg-2ubuntu2.2","5.8+dfsg-2ubuntu2.3","5.8+dfsg-2ubuntu2.4","5.8+dfsg-2ubuntu2.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1+dfsg-1ubuntu2.4"}]}],"versions":["5.9+dfsg-3ubuntu2","5.9+dfsg-3ubuntu3","5.9+dfsg-3ubuntu4","5.9.1+dfsg-1ubuntu1","5.9.1+dfsg-1ubuntu2","5.9.1+dfsg-1ubuntu2.1","5.9.1+dfsg-1ubuntu2.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2~dfsg-8.1ubuntu3.3+esm3"}]}],"versions":["5.7.2~dfsg-8ubuntu1","5.7.2~dfsg-8ubuntu2","5.7.2~dfsg-8.1ubuntu1","5.7.2~dfsg-8.1ubuntu2","5.7.2~dfsg-8.1ubuntu3","5.7.2~dfsg-8.1ubuntu3.1","5.7.2~dfsg-8.1ubuntu3.2","5.7.2~dfsg-8.1ubuntu3.3","5.7.2~dfsg-8.1ubuntu3.3+esm1","5.7.2~dfsg-8.1ubuntu3.3+esm2"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.3+dfsg-1ubuntu4.6+esm1"}]}],"versions":["5.7.3+dfsg-1ubuntu2","5.7.3+dfsg-1ubuntu3","5.7.3+dfsg-1ubuntu4","5.7.3+dfsg-1ubuntu4.1","5.7.3+dfsg-1ubuntu4.2","5.7.3+dfsg-1ubuntu4.3","5.7.3+dfsg-1ubuntu4.4","5.7.3+dfsg-1ubuntu4.5","5.7.3+dfsg-1ubuntu4.6"],"bundled":8}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"net-snmp","product":"net-snmp"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700s_firmware"}],"references":[{"url":"https://github.com/net-snmp/net-snmp/issues/474","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://gist.github.com/menglong2234/b7bc13ae1a144f47cc3c95a7ea062428","tags":["x_transferred","Exploit","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00010.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://security.netapp.com/advisory/ntap-20230223-0011/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44792","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230223-0011"},{"url":"https://github.com/advisories/GHSA-pccv-xjc7-m5qv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-44792","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2444","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44792","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2141897","tags":["report"]},{"url":"https://bugzilla.redhat.com/2141898","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2444.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2969","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2969.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-44792","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/44xxx/CVE-2022-44792.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-44792","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0015.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31388","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5795-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44793","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151540","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2444.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44792","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44793","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160723","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2969.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230068-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198059","tags":["report"]},{"url":"https://bugzilla.suse.com/1205148","tags":["report"]},{"url":"https://bugzilla.suse.com/1205150","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44793","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230075-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206044","tags":["report"]},{"url":"https://bugzilla.suse.com/1206828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-44792","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5795-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-44793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24810","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-44792","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T00:00:00Z","modified":"2025-05-05T16:12:17.885Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:30.176321Z"}],"euvd":[{"id":"EUVD-2022-47724","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T00:00:00Z","modified":"2025-05-05T16:12:17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:56.98956Z"}],"ghsa":[{"id":"GHSA-pccv-xjc7-m5qv","title":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a...","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T12:00:34Z","modified":"2025-05-05T18:33:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:02:07.964163Z"}],"nvd":[{"id":"CVE-2022-44792","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T03:15:09.303Z","modified":"2026-06-17T05:08:56.097Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:31.504574Z"}],"osv":[{"id":"ALPINE-CVE-2022-44792","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T03:15:09.303Z","modified":"2026-11-03T07:18:33.769137774Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-11385","title":"CVE-2022-44792 affecting package net-snmp for versions less than 5.9.4-1","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T03:15:09Z","modified":"2026-04-21T04:22:03.627574Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"AZL-41665","title":"CVE-2022-44792 affecting package net-snmp for versions less than 5.9.4-1","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T03:15:09Z","modified":"2026-04-21T04:51:57.576898Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"BELL-CVE-2022-44792","title":"CVE-2022-44792 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:43.582772Z","modified":"2026-01-26T09:46:58.786451Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-44792","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T00:00:00Z","modified":"2026-10-28T02:30:49.1961403Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-44792","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T03:15:09.303Z","modified":"2026-11-03T08:03:56.105192026Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"OESA-2023-1010","title":"net-snmp security update","description":"Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. The suite includes:\n\n\t\t- An extensible agent for responding to SNMP queries including built-in support for a wide range of MIB information modules\n\t\t- Command-line applications to retrieve and manipulate information from SNMP-capable devices\n\t\t- A daemon application for receiving SNMP notifications\n\t\t- A library for developing new SNMP applications, with C and Perl APIs\n\t\t- A graphical MIB browser.\r\n\r\nSecurity Fix(es):\r\n\r\nhandle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.(CVE-2022-44793)\r\n\r\nhandle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.(CVE-2022-44792)","status":"published","published":"2023-01-06T11:05:29Z","modified":"2026-08-18T01:17:28.519657084Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:2444","title":"Red Hat Security Advisory: net-snmp security and bug fix update","status":"published","published":"2024-09-16T09:22:31Z","modified":"2025-11-22T12:49:25Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2969","title":"Red Hat Security Advisory: net-snmp security and bug fix update","status":"published","published":"2024-09-16T09:22:41Z","modified":"2026-06-26T12:22:20.468922769Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"UBUNTU-CVE-2022-44792","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","status":"published","published":"2022-11-07T03:15:00Z","modified":"2026-04-22T13:31:58.148851Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"ALSA-2023:2444","title":"Moderate: net-snmp security and bug fix update","description":"The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.\n\nSecurity Fix(es):\n\n* net-snmp: NULL Pointer Exception when handling ipDefaultTTL (CVE-2022-44792)\n* net-snmp: NULL Pointer Exception when handling pv6IpForwarding (CVE-2022-44793)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:56.874913391Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2969","title":"Moderate: net-snmp security and bug fix update","description":"The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.\n\nSecurity Fix(es):\n\n* net-snmp: NULL Pointer Exception when handling ipDefaultTTL (CVE-2022-44792)\n* net-snmp: NULL Pointer Exception when handling pv6IpForwarding (CVE-2022-44793)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:06.051096243Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DLA-3270-1","title":"net-snmp - security update","status":"published","published":"2023-01-15T00:00:00Z","modified":"2026-03-09T01:18:19.677497Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4381-1","title":"net-snmp - security update","status":"published","published":"2025-11-25T00:00:00Z","modified":"2025-11-25T19:33:45.258292Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0015","title":"Updated net-snmp packages fix security vulnerability","description":"handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8\nthrough 5.9.3 has a NULL Pointer Exception bug that can be used by a\nremote attacker (who has write access) to cause the instance to crash via\na crafted UDP packet, resulting in Denial of Service. (CVE-2022-44792)\n\nhandle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP\n5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a\nremote attacker to cause the instance to crash via a crafted UDP packet,\nresulting in Denial of Service. (CVE-2022-44793)\n","status":"published","published":"2023-01-24T07:58:24Z","modified":"2026-04-16T04:40:54.675047662Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2023:0068-1","title":"Security update for net-snmp","description":"This update for net-snmp fixes the following issues:\n\n- CVE-2022-44793: Fixed a NULL pointer dereference issue that could\n  allow a remote attacker with write access to crash the server\n  instance (bsc#1205148).\n- CVE-2022-44792: Fixed a NULL pointer dereference issue that could\n  allow a remote attacker with write access to crash the server\n  instance (bsc#1205150).\n\nOther fixes:\n- Fixed a potential invalid free of memory, and hardened string handling\n  against concurrency issues (bsc#1198059).\n","status":"published","published":"2023-01-11T10:44:24Z","modified":"2026-02-04T03:01:48.655703Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0075-1","title":"Security update for net-snmp","description":"This update for net-snmp fixes the following issues:\n\n- CVE-2022-44793: Fixed a NULL pointer dereference issue that could\n  allow a remote attacker with write access to crash the server\n  instance (bsc#1205148).\n- CVE-2022-44792: Fixed a NULL pointer dereference issue that could\n  allow a remote attacker with write access to crash the server\n  instance (bsc#1205150).\n\nOther fixes:\n- Enabled AES-192 and AES-256 privacy protocols (bsc#1206828).\n- Fixed an incorrect systemd hardening that caused home directory\n  size and allocation to be listed incorrectly (bsc#1206044)\n","status":"published","published":"2023-01-12T08:03:30Z","modified":"2026-02-04T02:33:52.283364Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5795-1","title":"net-snmp vulnerabilities","description":"It was discovered that Net-SNMP incorrectly handled certain requests. A\nremote attacker could possibly use these issues to cause Net-SNMP to crash,\nresulting in a denial of service.\n","status":"published","published":"2023-01-09T13:12:06Z","modified":"2026-04-22T10:31:40.369032Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5795-2","title":"net-snmp vulnerabilities","description":"USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Net-SNMP incorrectly handled certain requests. A\n remote attacker could possibly use these issues to cause Net-SNMP to crash,\n resulting in a denial of service.\n\n Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled\n memory operations when processing certain requests. A remote attacker could\n use this issue to cause Net-SNMP to crash, resulting in a denial of\n service, or possibly execute arbitrary code.\n","status":"published","published":"2023-01-16T12:18:48Z","modified":"2026-06-29T13:50:45.103996462Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}
