[Pkg-net-snmp-devel] Bug#894110: net-snmp: CVE-2018-1000116

Chris Lamb lamby at debian.org
Mon Mar 26 14:09:25 UTC 2018


Package: net-snmp
Version: 5.7.2.1+dfsg-1
X-Debbugs-CC: team at security.debian.org
Severity: grave
Tags: security

Hi,

The following vulnerability was published for net-snmp:

CVE-2018-1000116[0]:
| NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the
| UDP protocol handler that can result in command execution.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-1000116
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000116


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-



More information about the Pkg-net-snmp-devel mailing list