NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0463 advisory.

    This advisory aggregates security fixes for the net-snmp SRPM in CIQ LTS 9.2. It addresses 15 CVEs:
    CVE-2025-68615, CVE-2022-24808, CVE-2014-3565, CVE-2022-24805, CVE-2022-44793, and 10 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1183 advisory.

    This advisory aggregates security fixes for the net-snmp SRPM in CIQ LTS 9.6. It addresses 15 CVEs:
    CVE-2018-1000116, CVE-2025-68615, CVE-2022-44792, CVE-2022-24808, CVE-2008-6123, and 10 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0118 advisory.

    This advisory aggregates security fixes for the net-snmp SRPM in CIQ LTS 8.6. It addresses 16 CVEs:
    CVE-2018-1000116, CVE-2025-68615, CVE-2022-44792, CVE-2022-24808, CVE-2008-6123, and 11 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can     result in command execution. (CVE-2018-1000116)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the net package has been released.

According to the version of the net-snmp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - It was discovered that the snmp_pdu_parse() mishandles     error codes and is vulnerable to a heap corruption     within the parsing of the PDU prior to the     authentication process. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2018-1000116)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the snmp_pdu_parse() mishandles     error codes and is vulnerable to a heap corruption     within the parsing of the PDU prior to the     authentication process. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2018-1000116)

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.(CVE-2018-18066)

  - It was discovered that the snmp_pdu_parse() function     could leave incompletely parsed varBind variables in     the list of variables. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2015-5621)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-1000116

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running iDRAC7 or iDRAC8 with a firmware version prior to 2.52.52.52 and is therefore affected by multiple vulnerabilities.

A heap corruption vulnerability was discovered in net-snmp, a suite of Simple Network Management Protocol applications, triggered when parsing the PDU prior to the authentication process. A remote, unauthenticated attacker can take advantage of this flaw to crash the snmpd process (causing a denial of service) or, potentially, execute arbitrary code with the privileges of the user running snmpd.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1636 advisory.

    The net-snmp packages provide various libraries and tools for the Simple     Network Management Protocol (SNMP), including an SNMP library, an     extensible agent, tools for requesting or setting information from SNMP     agents, tools for generating and handling SNMP traps, a version of the     netstat command which uses SNMP, and a Tk/Perl Management Information Base     (MIB) browser.

    It was discovered that the snmp_pdu_parse() function could leave     incompletely parsed varBind variables in the list of variables. A remote,     unauthenticated attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with the privileges of     the user running snmpd. (CVE-2015-5621)

    Red Hat would like to thank Qinghao Tang of QIHU 360 company, China for     reporting this issue.

    All net-snmp users are advised to upgrade to these updated packages,     which contain a backported patch to correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated net-snmp packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.

It was discovered that the snmp_pdu_parse() function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user running snmpd. (CVE-2015-5621)

Red Hat would like to thank Qinghao Tang of QIHU 360 company, China for reporting this issue.

All net-snmp users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

ID	Name	Product	Family	Type	Severity
356569	Rocky Linux 9.2 [CIQ] Security Update: net-snmp / net-snmp-agent-libs / net-snmp-agent-libs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0463)	Nessus	Rocky Linux Local Security Checks	Local	critical
356134	Rocky Linux 9.6 [CIQ] Security Update: net-snmp / net-snmp-agent-libs / net-snmp-agent-libs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1183)	Nessus	Rocky Linux Local Security Checks	Local	critical
355486	Rocky Linux 8.6 [CIQ] Security Update: net-snmp / net-snmp-agent-libs / net-snmp-agent-libs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0118)	Nessus	Rocky Linux Local Security Checks	Local	critical
221243	Linux Distros Unpatched Vulnerability : CVE-2018-1000116	Nessus	Misc.	Local	critical
203049	Photon OS 2.0: Net PHSA-2018-2.0-0037	Nessus	PhotonOS Local Security Checks	Local	critical
131481	EulerOS Virtualization for ARM 64 3.0.3.0 : net-snmp (EulerOS-SA-2019-2316)	Nessus	Huawei Local Security Checks	Local	critical
124939	EulerOS Virtualization 3.0.1.0 : net-snmp (EulerOS-SA-2019-1436)	Nessus	Huawei Local Security Checks	Local	critical
121825	Photon OS 1.0: Net PHSA-2018-1.0-0126	Nessus	PhotonOS Local Security Checks	Local	critical
120708	Fedora 28 : 1:net-snmp (2018-af3be80746)	Nessus	Fedora Local Security Checks	Local	critical
109208	Dell iDRAC Products Multiple Vulnerabilities (Mar 2018)	Nessus	CGI abuses	Remote	critical
108696	Debian DSA-4154-1 : net-snmp - security update	Nessus	Debian Local Security Checks	Local	critical
108499	Fedora 26 : 1:net-snmp (2018-5a5f51753c)	Nessus	Fedora Local Security Checks	Local	critical
108312	Fedora 27 : 1:net-snmp (2018-d64806ca1d)	Nessus	Fedora Local Security Checks	Local	critical
85497	RHEL 6 / 7 : net-snmp (RHSA-2015:1636)	Nessus	Red Hat Local Security Checks	Local	medium
85464	CentOS 6 / 7 : net-snmp (CESA-2015:1636)	Nessus	CentOS Local Security Checks	Local	critical

Detections

Analytics

CVE-2018-1000116

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium

critical