CVE-2022-44793: 
NixOS vulnerability analysis and mitigation

A NULL Pointer Exception vulnerability was discovered in Net-SNMP versions 5.4.3 through 5.9.3, identified as CVE-2022-44793. The vulnerability exists in the handle_ipv6IpForwarding function within agent/mibgroup/ip-mib/ip_scalars.c. This security flaw was discovered and disclosed in November 2022, affecting Net-SNMP installations across various platforms (NVD, MITRE).

The vulnerability occurs when handling SNMP requests, specifically when processing IPv6 forwarding configurations. When a crafted UDP packet containing a NULL varlist data for SNMPSET packet with object identifier 1.3.6.1.2.1.4.25.0 is received, it triggers a NULL pointer dereference in the handle_ipv6IpForwarding function. The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (NVD).

When successfully exploited, this vulnerability can lead to a Denial of Service (DoS) condition by causing the Net-SNMP instance to crash. The impact is limited to availability, with no direct effect on confidentiality or integrity of the system (NetApp Advisory).

The vulnerability can be exploited remotely by sending a specially crafted UDP packet to the affected system. A proof-of-concept exploit has been publicly disclosed, demonstrating how an unauthenticated attacker can trigger the NULL pointer dereference by sending an SNMPSET packet with specific malformed data (GitHub PoC, GitHub Issue).

Various vendors have released patches to address this vulnerability. Debian has released version 5.7.3+dfsg-5+deb10u4 for Debian 10 (Buster). Ubuntu has provided fixes across multiple versions, including updates for 22.04 LTS (jammy), 20.04 LTS (focal), and 18.04 LTS (bionic). Users are strongly advised to upgrade their Net-SNMP installations to the latest patched versions (Debian Advisory).