Linux · Security advisory · September 26, 2024

ELSA-2024-7260: Security update for 7 packages

ELSA-2024-7260, released September 26, 2024, fixes 6 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0130
70th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 2 Routine 4

Fixed package versions

ProductReleaseFixed in
net-snmpol 91:5.9.1-13.0.1.el9_4.3
net-snmp-agent-libsol 91:5.9.1-13.0.1.el9_4.3
net-snmp-develol 91:5.9.1-13.0.1.el9_4.3
net-snmp-libsol 91:5.9.1-13.0.1.el9_4.3
net-snmp-perlol 91:5.9.1-13.0.1.el9_4.3
net-snmp-utilsol 91:5.9.1-13.0.1.el9_4.3
python3-net-snmpol 91:5.9.1-13.0.1.el9_4.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-24805 net-snmp: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), includin... 8.8 0.0130 None reported
High CVE-2022-24810 net-snmp: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), includin... 8.8 0.0116 None reported
Routine CVE-2022-24808 net-snmp: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), includin... 6.5 0.0114 None reported
Routine CVE-2022-24809 net-snmp: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), includin... 6.5 0.0111 None reported
Routine CVE-2022-24806 net-snmp: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), includin... 5.9 0.0106 None reported
Routine CVE-2022-24807 net-snmp: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), includin... 6.5 0.0102 None reported
Showing 1 to 6 of 6 1