#VU70878 NULL pointer dereference in Net-snmp - CVE-2022-44792

Vulnerability identifier: #VU70878

Vulnerability risk: Medium

CVSSv4.0: 5.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2022-44792

CWE-ID: CWE-476

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
Net-snmp
Server applications / Remote management servers, RDP, SSH

Vendor: net-snmp.sourceforge.net

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the handle_ipDefaultTTL() function in agent/mibgroup/ip-mib/ip_scalars.c. A remote non-authenticated attacker can send specially crafted UDP to the application and perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Net-snmp: 5.8 rc1 - 5.9.3

---

External links
http://github.com/net-snmp/net-snmp/issues/474
http://gist.github.com/menglong2234/b7bc13ae1a144f47cc3c95a7ea062428
http://github.com/net-snmp/net-snmp/commit/be804106fd0771a7d05236cff36e199af077af57

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.