CVE-2022-44792: debian debian_linux NULL Pointer Dereference
Vulnerability summary
CVE-2022-44792 is a medium (CVSS 6.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 52.05% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 9 · Related 4Timeline
- 07-11-2022PublishedVulnerability first disclosed.
- 05-05-2025Last modifiedVulnerability information updated.
Description
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · AlpineEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
52.05%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 52.05% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundNet Snmp
Maturity: poc
B7Bc13Ae1A144F47Cc3C95A7Ea062428
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Netapp4 products
Debian2 products
- net-snmp< 5.9.3+dfsg-2
- debian_linuxEOL10.0
Alpine1 product
- net-snmp≥ 5.8, < 5.9.3-r1 | ≥ 5.8, < 5.9.3-r2
Net-snmp1 product
- net-snmp≥ 5.8, ≤ 5.9.3
Ubuntu1 product
- net-snmp< 5.7.2~dfsg-8.1ubuntu3.3+esm3 | < 5.7.3+dfsg-1ubuntu4.6+esm1 | < 5.7.3+dfsg-1.8ubuntu3.8 | < 5.8+dfsg-2ubuntu2.6 | < 5.9.1+dfsg-1ubuntu2.4
5 vendors · 9 products
References
11 links
- security.netapp.com/advisory/ntap-20230223-0011/Third Party Advisory
