https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:34:11.678241+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:7260 ALSA-2024:7260 — Moderate: net-snmp security update 2026-10-03T11:34:11.791312+00:00

Affected: AlmaLinux:9: net-snmp, AlmaLinux:9: net-snmp-agent-libs, AlmaLinux:9: net-snmp-devel, AlmaLinux:9: net-snmp-libs, AlmaLinux:9: net-snmp-perl, AlmaLinux:9: net-snmp-utils, AlmaLinux:9: python3-net-snmp

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.

Security Fix(es):

* net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. (CVE-2022-24805) * : net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously (CVE-2022-24806) * net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access (CVE-2022-24807) * net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24809) * net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference (CVE-2022-24808) * net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24810)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-06508 bdu:2024-06508 2026-10-03T11:34:11.791397+00:00 bdu:2024-06508 https://cve.radiocsirt.org/vuln/bell-cve-2022-24809 Withdrawn: BELL-CVE-2022-24809 — CVE-2022-24809 does not affect BellSoft software 2026-10-03T11:34:11.791418+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318 certfr-2023-avi-0318 — De multiples vulnérabilités ont été découvertes dans <span class="textit">VMware</span>. Elles permettent à un attaquan… 2026-10-03T11:34:11.791433+00:00 certfr-2023-avi-0318 https://cve.radiocsirt.org/vuln/euvd-2026-14274 EUVD-2026-14274 2026-10-03T11:34:11.791448+00:00 EUVD-2026-14274 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24809 fkie_cve-2022-24809 2026-10-03T11:34:11.791459+00:00

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.

 https://cve.radiocsirt.org/vuln/gsd-2022-24809 gsd-2022-24809 2026-10-03T11:34:11.791482+00:00 gsd-2022-24809 https://cve.radiocsirt.org/vuln/oesa-2022-1888 OESA-2022-1888 — net-snmp security update 2026-10-03T11:34:11.791493+00:00

Affected: openEuler:20.03-LTS-SP1: net-snmp, openEuler:20.03-LTS-SP3: net-snmp, openEuler:22.03-LTS: net-snmp

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. The suite includes:

+ - An extensible agent for responding to SNMP queries including built-in + support for a wide range of MIB information modules + - Command-line applications to retrieve and manipulate information from + SNMP-capable devices + - A daemon application for receiving SNMP notifications + - A library for developing new SNMP applications, with C and Perl APIs + - A graphical MIB browser. Security Fix(es): https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference.(CVE-2022-24809) CVE-2022-24807 A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES(CVE-2022-24807) https://github.com/net-snmp/net-snmp/blob/v5.9.2/CHANGES CVE-2022-24808 A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference(CVE-2022-24808) +*5.9.2*: + security: + - These two CVEs can be exploited by a user with read-only credentials: + - CVE-2022-24805 A buffer overflow in the handling of the INDEX of + NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. + - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable + can cause…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12174-1 openSUSE-SU-2024:12174-1 — libsnmp40-32bit-5.9.2-1.1 on GA media 2026-10-03T11:34:11.791537+00:00

libsnmp40-32bit-5.9.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:7875 RHSA-2024:7875 — Red Hat Security Advisory: net-snmp security update 2026-10-03T11:34:11.791557+00:00

net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/suse-ru-2024:0029-1 SUSE-RU-2024:0029-1 — Recommended update for net-snmp 2026-10-03T11:34:11.791583+00:00

Recommended update for net-snmp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24809 UBUNTU-CVE-2022-24809 2026-10-03T11:34:11.791599+00:00

Affected: Ubuntu:Pro:14.04:LTS: net-snmp, Ubuntu:Pro:16.04:LTS: net-snmp, Ubuntu:18.04:LTS: net-snmp, Ubuntu:20.04:LTS: net-snmp, Ubuntu:22.04:LTS: net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0604 WID-SEC-W-2022-0604 — Net-SNMP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T11:34:11.791625+00:00

Ein Angreifer kann mehrere Schwachstellen in Net-SNMP ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.