WaratekVRT Sign in

CVE-2018-18066 Net-SNMP

Affected softwareNet-SNMP
Severity7.5 High CVSS 3.1 3 scores
WeaknessCWE-476
Published8 Oct 2018
Updated17 Jun 2026

Description

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Exploitation status

Proof of concept only

A proof of concept exists, but no reviewed exploit catalogue lists this CVE.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment exploitation: poc CISA recorded that an exploit has been demonstrated. Automatable: yes, technical impact: partial.
  • Indexed PoC none indexed
  • EPSS 3.6% chance in 30 days

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

7.5 HIGH v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CISA-ADP Secondary published
CVSS 3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD Primary
CVSS 2.0 5.0 none AV:N/AC:L/Au:N/C:N/I:N/A:P NVD Primary

Affected software and releases

Oracle advisories

AdvisoryTypeQuarterProducts Oracle names in its risk matrix
Oracle Critical Patch Update October 2019 ↗ CPU 2019-Q4 Oracle Systems / XCP Firmware (Net SNMP) (Prior to XCP2361, Prior to XCP3070)

Oracle components and versions

FamilyComponentVersions, as Oracle lists themRead as
Oracle Systems XCP Firmware (Net SNMP) Prior to XCP2361, Prior to XCP3070

Products and versions

7 products, 7 version entries
SourceVendorProductSchemeAffected versions
nvd net-snmp net-snmp generic ＜ 5.8
nvd netapp cloud backup generic any version
nvd netapp data ontap generic any version
nvd netapp e-series santricity os controller generic ≥ 11.0 and ≤ 11.5
nvd netapp hyper converged infrastructure generic any version
nvd netapp solidfire element os generic any version
nvd netapp storagegrid webscale generic any version

Earlier manual review

A reviewer classified this CVE in an older dataset. We kept the labels and products below, but not the reviewer's reasoning.

## Manual Classification Context **Labels:** XCP FIRMWARE (NET SNMP), SNMP, NO AUTH REMOTE EXPLOIT **Products:** M10-4, M10-4S, ORACLE SYSTEMS, M12-1, M12-2, M12-2S SERVERS, NET-SNMP, FUJITSU M10-1

References

URLTags
https://dumpco.re/blog/net-snmp-5.7.3-remote-dos Exploit, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20181107-0001/ Third Party Advisory
https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/ Patch, Third Party Advisory
https://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/ Patch, Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Timeline
Published2018-10-08By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.