Remote Denial of Service Vulnerability in Net-SNMP by Net-SNMP
CVE-2018-18066

7.5HIGH

Key Information:

Vendor: Net-snmp
Status: Net-snmp
Vendor: CVE Published:; 8 October 2018

What is CVE-2018-18066?

Net-SNMP versions prior to 5.8 are vulnerable to a denial of service attack due to a NULL pointer exception in the snmp_oid_compare function. An unauthenticated attacker can exploit this vulnerability by sending specially crafted UDP packets, causing the Net-SNMP instance to crash. This vulnerability leaves systems open to potential disruption, making it critical for users of affected versions to apply available patches and updates.