ELA-52-1 net-snmp security update

fix denial of service

2018-10-15
Packagenet-snmp
Version5.4.3~dfsg-2.8+deb7u3
Related CVEs CVE-2018-18065


Magnus K. Stubman found that an authenticated remote attacker could crash an instance of Net-SNMP by sending a specially crafted UDP packet resulting in a denial-of-service.



For Debian 7 Wheezy, these problems have been fixed in version 5.4.3~dfsg-2.8+deb7u3.

We recommend that you upgrade your net-snmp packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.