01 Record

CVE-2018-18065

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 17.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 96.9% of scored records. A rank, not a probability.
NVD base score: 6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2018-10-08 18:00Z7 YR AGO

Last updated

2024-08-05 11:01Z2 YR AGO

Reserved

2018-10-08

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.1

Document digest

5bcc76f255e34d22dfe3fd27ab5d2e76d3c8ea35b200976e11a91cd1736ac613

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

debiandebian_linuxNot specified—

net-snmpnet-snmpNot specified—

netappcloud_backupNot specified—

netappdata_ontapNot specified—

netappe-series_santricity_os_controllerNot specified—

netapphyper_converged_infrastructureNot specified—

netappsolidfire_element_osNot specified—

netappstoragegrid_webscaleNot specified—

paloaltonetworkspan-osNot specified—

redhatenterprise_linuxNot specified—

redhatrhev_hypervisorNot specified—

06 References

sourceforge.nethttps://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/x_refsource_MISC
www.exploit-db.com45547https://www.exploit-db.com/exploits/45547/exploitx_refsource_EXPLOIT-DB
usn.ubuntu.comUSN-3792-1https://usn.ubuntu.com/3792-1/vendor-advisoryx_refsource_UBUNTU
dumpco.rehttps://dumpco.re/blog/net-snmp-5.7.3-remote-dosx_refsource_MISC
security.netapp.comhttps://security.netapp.com/advisory/ntap-20181107-0001/x_refsource_CONFIRM
usn.ubuntu.comUSN-3792-2https://usn.ubuntu.com/3792-2/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3792-3https://usn.ubuntu.com/3792-3/vendor-advisoryx_refsource_UBUNTU
www.debian.orgDSA-4314https://www.debian.org/security/2018/dsa-4314vendor-advisoryx_refsource_DEBIAN
www.securityfocus.com106265http://www.securityfocus.com/bid/106265vdb-entryx_refsource_BID
www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlx_refsource_MISC
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdfx_refsource_CONFIRM
security.paloaltonetworks.comhttps://security.paloaltonetworks.com/CVE-2018-18065x_refsource_CONFIRM

01 Record index

CVE-2018-18065

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2018-18065

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References