CVE-2018-18066

Name of the Vulnerable Software and Affected Versions Net-SNMP versions prior to 5.8

Description The issue is related to a NULL Pointer Exception bug in the snmp oid compare function. This bug can be exploited by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Recommendations For Net-SNMP versions prior to 5.8, update to version 5.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the snmp oid compare function to minimize the risk of exploitation.