GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OESA-2022-1888 (CVE-2022-24809)

Vulnerability from osv_openeuler – Published: 2022-09-02 11:05 – Updated: 2026-08-06 11:05 – Source website
VLAI
Summary
net-snmp security update
Details

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. The suite includes:

    • An extensible agent for responding to SNMP queries including built-in
  • support for a wide range of MIB information modules
    • Command-line applications to retrieve and manipulate information from
  • SNMP-capable devices
    • A daemon application for receiving SNMP notifications
    • A library for developing new SNMP applications, with C and Perl APIs
    • A graphical MIB browser.

Security Fix(es):

https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference.(CVE-2022-24809)

CVE-2022-24807 A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES(CVE-2022-24807)

https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES

CVE-2022-24808 A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference(CVE-2022-24808)

+5.9.2: + security: + - These two CVEs can be exploited by a user with read-only credentials: + - CVE-2022-24805 A buffer overflow in the handling of the INDEX of + NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. + - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable + can cause a NULL pointer dereference. + - These CVEs can be exploited by a user with read-write credentials: + - CVE-2022-24806 Improper Input Validation when SETing malformed + OIDs in master agent and subagent simultaneously + - CVE-2022-24807 A malformed OID in a SET request to + SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an + out-of-bounds memory access. + - CVE-2022-24808 A malformed OID in a SET request to + NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference + - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable + can cause a NULL pointer dereference. + - To avoid these flaws, use strong SNMPv3 credentials and do not share them. + If you must use SNMPv1 or SNMPv2c, use a complex community string + and enhance the protection by restricting access to a given IP address range. + - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for + reporting the following CVEs that have been fixed in this release, and + to Arista Networks for providing fixes.(CVE-2022-24805)

https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.(CVE-2022-24810)

From https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES CVE-2022-24806 Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously(CVE-2022-24806)

Severity
6.7 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
References
To clipboard 

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "net-snmp-5.9-6.oe1.aarch64.rpm",
          "net-snmp-debuginfo-5.9-6.oe1.aarch64.rpm",
          "net-snmp-perl-5.9-6.oe1.aarch64.rpm",
          "python3-net-snmp-5.9-6.oe1.aarch64.rpm",
          "net-snmp-libs-5.9-6.oe1.aarch64.rpm",
          "net-snmp-gui-5.9-6.oe1.aarch64.rpm",
          "net-snmp-devel-5.9-6.oe1.aarch64.rpm",
          "net-snmp-debugsource-5.9-6.oe1.aarch64.rpm"
        ],
        "noarch": [
          "net-snmp-help-5.9-6.oe1.noarch.rpm"
        ],
        "src": [
          "net-snmp-5.9-6.oe1.src.rpm"
        ],
        "x86_64": [
          "python3-net-snmp-5.9-6.oe1.x86_64.rpm",
          "net-snmp-debuginfo-5.9-6.oe1.x86_64.rpm",
          "net-snmp-debugsource-5.9-6.oe1.x86_64.rpm",
          "net-snmp-devel-5.9-6.oe1.x86_64.rpm",
          "net-snmp-5.9-6.oe1.x86_64.rpm",
          "net-snmp-gui-5.9-6.oe1.x86_64.rpm",
          "net-snmp-perl-5.9-6.oe1.x86_64.rpm",
          "net-snmp-libs-5.9-6.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "net-snmp",
        "purl": "pkg:rpm/openEuler/net-snmp\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9-6.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "net-snmp-devel-5.9-6.oe1.aarch64.rpm",
          "python3-net-snmp-5.9-6.oe1.aarch64.rpm",
          "net-snmp-5.9-6.oe1.aarch64.rpm",
          "net-snmp-libs-5.9-6.oe1.aarch64.rpm",
          "net-snmp-gui-5.9-6.oe1.aarch64.rpm",
          "net-snmp-debuginfo-5.9-6.oe1.aarch64.rpm",
          "net-snmp-debugsource-5.9-6.oe1.aarch64.rpm",
          "net-snmp-perl-5.9-6.oe1.aarch64.rpm"
        ],
        "noarch": [
          "net-snmp-help-5.9-6.oe1.noarch.rpm"
        ],
        "src": [
          "net-snmp-5.9-6.oe1.src.rpm"
        ],
        "x86_64": [
          "net-snmp-debugsource-5.9-6.oe1.x86_64.rpm",
          "net-snmp-gui-5.9-6.oe1.x86_64.rpm",
          "net-snmp-devel-5.9-6.oe1.x86_64.rpm",
          "net-snmp-perl-5.9-6.oe1.x86_64.rpm",
          "python3-net-snmp-5.9-6.oe1.x86_64.rpm",
          "net-snmp-5.9-6.oe1.x86_64.rpm",
          "net-snmp-debuginfo-5.9-6.oe1.x86_64.rpm",
          "net-snmp-libs-5.9-6.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "net-snmp",
        "purl": "pkg:rpm/openEuler/net-snmp\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9-6.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "net-snmp-perl-5.9.1-3.oe2203.aarch64.rpm",
          "net-snmp-debuginfo-5.9.1-3.oe2203.aarch64.rpm",
          "net-snmp-devel-5.9.1-3.oe2203.aarch64.rpm",
          "net-snmp-gui-5.9.1-3.oe2203.aarch64.rpm",
          "net-snmp-libs-5.9.1-3.oe2203.aarch64.rpm",
          "net-snmp-debugsource-5.9.1-3.oe2203.aarch64.rpm",
          "net-snmp-5.9.1-3.oe2203.aarch64.rpm",
          "python3-net-snmp-5.9.1-3.oe2203.aarch64.rpm"
        ],
        "noarch": [
          "net-snmp-help-5.9.1-3.oe2203.noarch.rpm"
        ],
        "src": [
          "net-snmp-5.9.1-3.oe2203.src.rpm"
        ],
        "x86_64": [
          "net-snmp-5.9.1-3.oe2203.x86_64.rpm",
          "net-snmp-gui-5.9.1-3.oe2203.x86_64.rpm",
          "python3-net-snmp-5.9.1-3.oe2203.x86_64.rpm",
          "net-snmp-perl-5.9.1-3.oe2203.x86_64.rpm",
          "net-snmp-debuginfo-5.9.1-3.oe2203.x86_64.rpm",
          "net-snmp-debugsource-5.9.1-3.oe2203.x86_64.rpm",
          "net-snmp-devel-5.9.1-3.oe2203.x86_64.rpm",
          "net-snmp-libs-5.9.1-3.oe2203.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "net-snmp",
        "purl": "pkg:rpm/openEuler/net-snmp\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.9.1-3.oe2203"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Medium"
  },
  "details": "Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. The suite includes:\n\n+\t\t- An extensible agent for responding to SNMP queries including built-in\n+\t\tsupport for a wide range of MIB information modules\n+\t\t- Command-line applications to retrieve and manipulate information from\n+\t\tSNMP-capable devices\n+\t\t- A daemon application for receiving SNMP notifications\n+\t\t- A library for developing new SNMP applications, with C and Perl APIs\n+\t\t- A graphical MIB browser.\r\n\r\nSecurity Fix(es):\r\n\r\nhttps://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES\nCVE-2022-24809\u00a0A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference.(CVE-2022-24809)\r\n\r\nCVE-2022-24807\u00a0A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access.\nhttps://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES(CVE-2022-24807)\r\n\r\nhttps://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES\r\n\r\nCVE-2022-24808\u00a0A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference(CVE-2022-24808)\r\n\r\n+*5.9.2*:\n+    security:\n+      - These two CVEs can be exploited by a user with read-only credentials:\n+          - CVE-2022-24805\u00a0A buffer overflow in the handling of the INDEX of\n+            NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.\n+          - CVE-2022-24809\u00a0A malformed OID in a GET-NEXT to the nsVacmAccessTable\n+            can cause a NULL pointer dereference.\n+      - These CVEs can be exploited by a user with read-write credentials:\n+          - CVE-2022-24806\u00a0Improper Input Validation when SETing malformed\n+            OIDs in master agent and subagent simultaneously\n+          - CVE-2022-24807\u00a0A malformed OID in a SET request to\n+            SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an\n+            out-of-bounds memory access.\n+          - CVE-2022-24808\u00a0A malformed OID in a SET request to\n+            NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference\n+          - CVE-2022-24810\u00a0A malformed OID in a SET to the nsVacmAccessTable\n+            can cause a NULL pointer dereference.\n+      - To avoid these flaws, use strong SNMPv3 credentials and do not share them.\n+        If you must use SNMPv1 or SNMPv2c, use a complex community string\n+        and enhance the protection by restricting access to a given IP address range.\n+      - Thanks are due to\u00a0Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for\n+        reporting the following CVEs that have been fixed in this release, and\n+        to Arista Networks for providing fixes.(CVE-2022-24805)\r\n\r\nhttps://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES\n CVE-2022-24810\u00a0A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.(CVE-2022-24810)\r\n\r\nFrom https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES\nCVE-2022-24806 Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously(CVE-2022-24806)",
  "id": "OESA-2022-1888",
  "modified": "2026-08-06T11:05:09Z",
  "published": "2022-09-02T11:05:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1888"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24809"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24807"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24808"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24805"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24810"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24806"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "net-snmp security update",
  "upstream": [
    "CVE-2022-24809",
    "CVE-2022-24807",
    "CVE-2022-24808",
    "CVE-2022-24805",
    "CVE-2022-24810",
    "CVE-2022-24806"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.