[CLSA-2026:1793167817] net-snmp: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-28 06:10:28 UTC
Description:
- CVE-2018-18066: NULL pointer dereference in snmpd table helper on GetNext - CVE-2022-24805: out-of-bounds access via the NET-SNMP-VACM-MIB index - CVE-2022-24810: NULL pointer dereference on SET to nsVacmAccessTable - CVE-2025-68615: out-of-bounds trapOid[] access in snmptrapd
Updated packages:
  • net-snmp-5.5-60.0.1.el6_10.2.tuxcare.els1.i686.rpm
    sha:ae91ad9d7a89fb1ca20c0a6b4f2990a4620f565a5f5ced01f49604ba8ec10465
  • net-snmp-5.5-60.0.1.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:897ec2b65898ae1d0f82d8deabb2a5051c81ce649e387606cd2080f97d15ac8b
  • net-snmp-devel-5.5-60.0.1.el6_10.2.tuxcare.els1.i686.rpm
    sha:9bc763ccf325c3aaa4df5447a8b7a8da2a1bc4eeb3a24b3ff7246a6e53211b38
  • net-snmp-devel-5.5-60.0.1.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:75afdc9488f586980bea1bde239bdbe9cf61cde5b9018a582fed93020b91d9e8
  • net-snmp-libs-5.5-60.0.1.el6_10.2.tuxcare.els1.i686.rpm
    sha:94eb3eccd7cd1f398548d1191aedb289c16c99e0a41a4b17269b63e778e1b832
  • net-snmp-libs-5.5-60.0.1.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:42889e0956784c3400f786bdfd7f5138c132adbe6ac07acc198ec02ddeb6ac13
  • net-snmp-perl-5.5-60.0.1.el6_10.2.tuxcare.els1.i686.rpm
    sha:843de7789cac9a9fc0f43cb0955d699a51c51d7df75518ea435c1e86aaf46af3
  • net-snmp-perl-5.5-60.0.1.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:6a00e0289d7effcaf6d46d482e64c759793abb7688823ba295a5d6b013247546
  • net-snmp-python-5.5-60.0.1.el6_10.2.tuxcare.els1.i686.rpm
    sha:c8428b3414ad0f7744497de134e6adab98baea370d57c3a994af7f75a08c09c3
  • net-snmp-python-5.5-60.0.1.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:50644147dcdd335bc1b39e1682914ee861ca7c1a4b8109fa848d5da421791fbc
  • net-snmp-utils-5.5-60.0.1.el6_10.2.tuxcare.els1.i686.rpm
    sha:3349b14ba47a647b305dc074c00c001bbf70a17b6780f6ed09166758e119e0d6
  • net-snmp-utils-5.5-60.0.1.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:0e3540f657e603b726f54760b0974f24deb9074b983a98be936f50178645aab8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.