#1006675 Null pointer reference vulnerability in usmcmd

Package:
snmp
Source:
net-snmp
Description:
SNMP (Simple Network Management Protocol) applications
Submitter:
bi bi
Date:
2022-03-02 06:39:06 UTC
Severity:
normal
#1006675#5
Date:
2022-03-02 06:36:00 UTC
From:
To:
  We found one bug in snmp by fuzzing. Here is the vulnerability info
and poc. Please assist us to get the cve number, it is very important
to us.

  Discover: Yingchao Yu, Shibin Zhao, Chiheng Wang


  If argv[0] is NULL when usmcmd is started, it will cause a null pointer
reference vulnerability in snmp_parse_args () when the main function of
usmcmd starts parsing the parameters.

[image: image.png]

poc