← back
CVE-2018-18065

CVE-2018-18065

EPSS 17.2%
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45547/unverifiedexploitdbwww.exploit-db.com/exploits/45547unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdfhttps://dumpco.re/blog/net-snmp-5.7.3-remote-doshttps://security.netapp.com/advisory/ntap-20181107-0001/https://security.paloaltonetworks.com/CVE-2018-18065https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/https://usn.ubuntu.com/3792-1/https://usn.ubuntu.com/3792-2/https://usn.ubuntu.com/3792-3/https://www.debian.org/security/2018/dsa-4314https://www.exploit-db.com/exploits/45547/https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttp://www.securityfocus.com/bid/106265