- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3088-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
August 30, 2022                               https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : net-snmp
Version        : 5.7.3+dfsg-5+deb10u3
CVE ID         : CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
                  CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


Yu Zhang and Nanyu Zhong discovered several vulnerabilities in net-snmp, a 
suite of Simple Network Management Protocol applications, which could 
result in denial of service or the execution of arbitrary code.


For Debian 10 buster, these problems have been fixed in version
5.7.3+dfsg-5+deb10u3.

We recommend that you upgrade your net-snmp packages.

For the detailed security status of net-snmp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/net-snmp

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS