6.5

CVE-2018-18065: canonical ubuntu_linux NULL Pointer Dereference

CVSS: 6.5v3.0MediumModified
AliasesSUSE-SU-2018:3319-1SUSE-SU-2018:3333-1SUSE-SU-2018:3447-1
Published 08-10-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-18065 is a medium (CVSS 6.5) NULL Pointer Dereference vulnerability in canonical ubuntu_linux. EPSS estimates a 17.50% chance of exploitation in the next 30 days, higher than 97.1% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.0 (NVD)
EPSS score
17.50%
0%100%
Medium · +0.32 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 4 · Related 4
OPENSUSE-SU-2022:0050-1OPENSUSE-SU-2024:11082-1SUSE-SU-2022:0050-1SUSE-SU-2022:0050-2

Timeline

  1. 08-10-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

17.50%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.32 pp

From 17.19% on 18-09-2026

18-09-202618-10-2026
EPSS score
17.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • referenceUnverified

    Exploit Reference (dumpco.re)

    Maturity: unknown

  • exploit-databasedoslinuxUnverified

    net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse13 products
  • net-snmp&distro=SUSE Enterprise Storage 4< 5.7.3-6.3.1
  • net-snmp&distro=SUSE Linux Enterprise Desktop 12 SP3< 5.7.3-6.3.1
  • net-snmp&distro=SUSE Linux Enterprise Module for Basesystem 15< 5.7.3-7.3.1
  • net-snmp&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 5.7.3-6.3.1
  • net-snmp&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 5.7.3-6.3.1
Netapp6 products
Debian2 products
  • net-snmp< 5.7.3+dfsg-4 | < 5.7.3+dfsg-1.7+deb9u1 | < 5.7.2.1+dfsg-1+deb8u2
  • debian_linuxEOL9.0
Canonical1 product
Net-snmp1 product
Paloaltonetworks1 product
  • pan-os≤ 7.1.22 | ≥ 7.1.23, ≤ 8.0.15 | ≥ 8.0.16, ≤ 8.1.6
Ubuntu1 product
  • net-snmp< 5.7.2~dfsg-8.1ubuntu3.3 | < 5.7.3+dfsg-1ubuntu4.2 | < 5.7.3+dfsg-1.8ubuntu3.1

7 vendors · 25 products

References

27 links
Show all 27 references