Linux · Security advisory · May 24, 2023
ELSA-2023-2969: Security update for 6 packages
ELSA-2023-2969, released May 24, 2023, fixes 2 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Routine.
Routine
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.5346
98th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 0
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| net-snmp | ol 8 | 1:5.8-27.0.1.el8 |
| net-snmp-agent-libs | ol 8 | 1:5.8-27.0.1.el8 |
| net-snmp-devel | ol 8 | 1:5.8-27.0.1.el8 |
| net-snmp-libs | ol 8 | 1:5.8-27.0.1.el8 |
| net-snmp-perl | ol 8 | 1:5.8-27.0.1.el8 |
| net-snmp-utils | ol 8 | 1:5.8-27.0.1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2022-44793 | libnetsnmptrapd40: handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exce... | 6.5 | 0.5346 | None reported | |
| Routine | CVE-2022-44792 | tkmib: handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception... | 6.5 | 0.5205 | None reported |
Showing 1 to 2 of 2
1