snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1081 advisory.

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has net-snmp packages installed that are affected by a vulnerability:

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has net-snmp packages installed that are affected by a vulnerability:

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. (CVE-2018-18066)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2539 advisory.

  - net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of     service (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

* net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1081 advisory.

  - net-snmp: NULL pointer exception in snmp_oid_compare in     snmplib/snmp_api.c resulting in a denial of service     (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1081 advisory.

  - net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of     service (CVE-2018-18066)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.(CVE-2018-18066)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the snmp_pdu_parse() mishandles     error codes and is vulnerable to a heap corruption     within the parsing of the PDU prior to the     authentication process. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2018-1000116)

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.(CVE-2018-18066)

  - It was discovered that the snmp_pdu_parse() function     could leave incompletely parsed varBind variables in     the list of variables. A remote, unauthenticated     attacker could use this flaw to crash snmpd or,     potentially, execute arbitrary code on the system with     the privileges of the user running     snmpd.(CVE-2015-5621)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP     before 5.8 has a NULL Pointer Exception bug that can be     used by an unauthenticated attacker to remotely cause     the instance to crash via a crafted UDP packet,     resulting in Denial of Service.i1/4^CVE-2018-18066i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
180743	Oracle Linux 7 : net-snmp (ELSA-2020-1081)	Nessus	Oracle Linux Local Security Checks	high
164612	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.17.1)	Nessus	Misc.	critical
164596	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.3)	Nessus	Misc.	critical
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	critical
143955	NewStart CGSL CORE 5.05 / MAIN 5.05 : net-snmp Vulnerability (NS-SA-2020-0094)	Nessus	NewStart CGSL Local Security Checks	high
143896	NewStart CGSL CORE 5.04 / MAIN 5.04 : net-snmp Vulnerability (NS-SA-2020-0063)	Nessus	NewStart CGSL Local Security Checks	high
138620	Amazon Linux 2 : net-snmp (ALAS-2020-1454)	Nessus	Amazon Linux Local Security Checks	high
137413	RHEL 7 : net-snmp (RHSA-2020:2539)	Nessus	Red Hat Local Security Checks	high
135825	Scientific Linux Security Update : net-snmp on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	high
135333	CentOS 7 : net-snmp (CESA-2020:1081)	Nessus	CentOS Local Security Checks	high
135063	RHEL 7 : net-snmp (RHSA-2020:1081)	Nessus	Red Hat Local Security Checks	high
126844	EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2019-1716)	Nessus	Huawei Local Security Checks	high
124939	EulerOS Virtualization 3.0.1.0 : net-snmp (EulerOS-SA-2019-1436)	Nessus	Huawei Local Security Checks	critical
123900	EulerOS Virtualization 2.5.4 : net-snmp (EulerOS-SA-2019-1214)	Nessus	Huawei Local Security Checks	high
122209	EulerOS 2.0 SP5 : net-snmp (EulerOS-SA-2019-1036)	Nessus	Huawei Local Security Checks	high
122208	EulerOS 2.0 SP3 : net-snmp (EulerOS-SA-2019-1035)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2018-18066

high

Tenable Plugins

high

critical

critical

critical

high

high

high

high

high

high

high

high

critical

high

high

high