[SECURITY] [DLA 4381-1] net-snmp security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4381-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Thorsten Alteholz
November 25, 2025 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : net-snmp
Version : 5.9+dfsg-4+deb11u2
CVE ID : CVE-2022-44792 CVE-2022-44793
menglong2234 discovered NULL pointer exceptions in net-snmp, a suite of
Simple Network Management Protocol applications, which could could
result in denial of service.
CVE-2022-44792
A remote attacker (with write access) could trigger a NULL
dereference while handling ipDefaultTTL via a crafted UDP packet.
CVE-2022-44793
A remote attacker (with write access) could trigger a NULL
dereference while handling ipv6IpForwarding via a crafted UDP
packet.
For Debian 11 bullseye, these problems have been fixed in version
5.9+dfsg-4+deb11u2.
We recommend that you upgrade your net-snmp packages.
For the detailed security status of net-snmp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/net-snmp
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmkl94pfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcACgkQlvysDTh7
WEcCEg//WjAwmbMuzVIiks+iMPxCuIgZ/xNF3UlNZc5CgkJbt4qGEqB9Ilakc/Jo
1IijlKK5VdVmTOyWqdeR2k5J/fD5YwAODsVEFjNJNRcVLPfiXSNWWW7zCFPxhv+I
/D2+P68PSOaN0zzwpB8IXSyb5VZ6XdCilNigABbP4p9EKDcDpf/oRDbMZFAW3q4H
bgmcKZA/u/NS721SAFVrlrfV2qPTm/HQSozQuS3YTQKJg294lQtZZp9Bhm3MN2HW
eFlc3MvExQy5QlSlJbwNpkihT2kCa24pI40EjOrABnNeO1BzWehTX7gZ7H2gHKpA
4Z/6TQe6ZGzaO+MOSA6CGNCVDdgFjdwmBOmmR1viGPAxQQE6A17vuEuAM1b+/Pgz
ymqs1aG+4QZWucW7qvr3zZvlOdgU2XtZ1l/s31oAlK2g3SFHx1tOVdJKwf8aN2Xr
Gq+zUnJbh2/gLt4gAsCHHBz74k2reIQAjcWCIur8qVJsuFiAQYWcc8OzME/yXRZm
fv5HeCQaDU81VhJPIqq09trO6Fa7W9WfrumbZ2NxxtAoV0KcT74Xer4gZt/+YOsM
Y34AucvwI+A1+B/oUNQDhKEOxptExNKS6eej9P9Dhqsfpi4QkiCVDS9oH63gjtcF
SHpQVgMh+q2jCuTGOJaOd1KSnou3ZVsnZEmMXPIm7Z4EY2FsX3I=
=NmPM
-----END PGP SIGNATURE-----
Reply to: