Heap Corruption Vulnerability in NET-SNMP UDP Protocol Handler by Net-SNMP
CVE-2018-1000116

9.8CRITICAL

Key Information:

Vendor

Net-snmp

Status
Net-snmp
Vendor
CVE Published:
7 March 2018

What is CVE-2018-1000116?

A heap corruption vulnerability exists in the UDP protocol handler within NET-SNMP version 5.7.2. This flaw can be exploited to execute arbitrary commands, potentially compromising the integrity and security of the system. Proper mitigation steps are essential to safeguard against potential attacks stemming from this vulnerability.

References

https://www.debian.org/security/2018/dsa-4154
vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2018/03/msg0...
mailing-listx_refsource_MLIST
https://sourceforge.net/p/net-snmp/bugs/2821/
x_refsource_CONFIRM

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.