[IT-SecNots] [SECURITY] [DSA 4314-1] net-snmp security update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4314-1                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
October 11, 2018                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : net-snmp
CVE ID         : CVE-2018-18065
Debian Bug     : 910638

Magnus Klaaborg Stubman discovered a NULL pointer dereference bug in
net-snmp, a suite of Simple Network Management Protocol applications,
allowing a remote, authenticated attacker to crash the snmpd process
(causing a denial of service).

For the stable distribution (stretch), this problem has been fixed in
version 5.7.3+dfsg-1.7+deb9u1.

We recommend that you upgrade your net-snmp packages.

For the detailed security status of net-snmp please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/net-snmp

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlu/pPVfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0RpdQ//UcOJ+UDG5dfXj6J7peoZKXznHTn84fTuOH/1TLOUqOPj+/gP9056aLVI
urWE+OySyA0NobAZVMD7nh2QNUI3QpHI3Iup7+0D4XXZ14F6Tp6g8wSW/TbM1b+9
7GNlyRfrPKm3f4DJ+XA8z/unl6Wis4NRkxWRj3byQexndTcOtjARnIDf+hYkMx+/
2HZv739nsAOJduz+q4S9y5jQmQhkrS9YNdwd8rC0V+SUbYaFrv26NNQ+woUB7vrM
Xzsa71sHCAwrKpi09k0QUMUPfcKUpf87jyXY0bJwNsk6b5rejizYsuqE+6VsCqYd
AcZC2wZAyrBvHHYpAG9iU5OTh2KJdlEodBJcbCDz9PMwCc69NUeij5CXhAy3OpRQ
sLa/B3COHHua9TAeqMhp2xnBFrcSvWFQ2B7QvkTx21Vc/Ryb/vDdTREVShTAAE6Z
W5kUcBBX1dTH2gVK33tEqYb3oqbhg8tnpBRaHc6Yted6kNNbdTcqKUTIDj3R5N70
DfIb8M6ma9dMXtlYj6/ZZtjM1oKg5pkEDl3M66z8dDusZFLCZWOTRt2PP7dEpv50
cBWEvt7w5GZTpfs3hTOnv/Xkt5mafa4vicOTwj0AL2uSFdID8VI4yu0s/KRbEIyY
tBTjaZgM2Uf8O4mrFh1TuGclG78RxsJ0mffGFBRSlaYbb/u7uLE=
=jUAl
-----END PGP SIGNATURE-----