Güvenlik Danışarlıklarına Dön
Net-SNMP Vulnerability — Ubuntu Security Update (USN-8997-1)
USN-8997-1 fixes CVE-2026-89147 in Net-SNMP on Ubuntu: the SMUX module mishandled newly accepted connections, letting an unauthenticated remote attacker block the daemon indefinitely (CVSS 7.5, CWE-400 denial of service). Update: sudo apt update && sudo apt upgrade snmpd (or net-snmp per the package) and restart snmpd.
Critical
7.5 CVSS
Ubuntu 20.04
Ubuntu 22.04
SharedLicense lisansı altında bunun anlamı
SNMP is the monitoring lifeline for servers and network gear — an unauthenticated remote hang of the SNMP daemon blinds monitoring exactly when something else goes wrong.
| Architecture | Package | Checksum |
| aarch64 | pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm | 3b2ffb23dc24e83e10c83f4ccc075cc103fd56a2764b58524a1935394872ac76 |
| aarch64 | python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.aarch64.rpm | 447ac1bd4a54e2dfe2135ada69c94b6a8189c27a0306265f33888546262a47d0 |
| aarch64 | pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm | 540e9dde16c8fa7c18f9542b838001305955750fe85125fcd97ba750289b5cb0 |
| aarch64 | pygobject2-devel-2.28.7-5.module_el8.10.0+4137+2d0d25cf.aarch64.rpm | 59f5648a77fb81d71431f8eb29967535d768c9a4371eb21313641133a65fc8d6 |
| aarch64 | pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.aarch64.rpm | 6ef991da497a0c4d97d896c8f26b8eace58ac5c5a2ca40c2f000ee3a0b016851 |
| aarch64 | pygobject2-doc-2.28.7-5.module_el8.10.0+4137+2d0d25cf.aarch64.rpm | 7a520fb129e56764a5a11cba75028686dffbb30d0f032b3625079ab50588dfd0 |
| aarch64 | gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm | 88fedc5c211069e9705ba209e798d51e16f79a44085446fd02cd5e4371d24453 |
| aarch64 | pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.aarch64.rpm | 90381330f30e95ac33d677684ef3305609a0dde8b0c3ba0577677b70a269fb81 |
| aarch64 | pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.aarch64.rpm | ab9e892635db86825553b68892a804cfc8d4ee33129c624e424b022c972a0b24 |
| aarch64 | gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm | cfb347e7bb36c72216d0968753fc7c8932f1af2e088c7c0eb213d4d286f5770a |
| aarch64 | python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.aarch64.rpm | d140bb170981c279bed8331a3bbd9d9f2d53341292aee19a2fb49c0de12c57bf |
| aarch64 | gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm | e847b64fb35c4d147b777118b4f0d5dca31abcabf7a397bfdc2e744904f5efb9 |
| aarch64 | gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.aarch64.rpm | f87c6ac6c7bf3c0f5b509f03fd41df4befd955e237b2f03f906b4124d01e260d |
| noarch | pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm | bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70 |
| ppc64le | pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm | 068adc70a80ab7ada50f8dc6263ae80c4ddae9175e668e8fb8d5511ac5539f74 |
| ppc64le | gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm | 17590bc378b79583cea4e78e461838f603a67d3ed0815ecc070a2e1608f2904c |
| ppc64le | gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm | 17b501cf533fd046faa0ead83478ac8ee6f50b232f934828ed5b8374026aab27 |
| ppc64le | pygobject2-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm | 259ccd30531b45fe407054614f9a169f29510214701b3b30be78a2dca320c517 |
| ppc64le | pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm | 400bfe9b8ecc094297226eeab20bf88f02344beb51ec20496ddd8cfe6d138b0e |
| ppc64le | python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.ppc64le.rpm | 50a023b50c7582b0b98b2003501d95c15cdbe85e2fecc6ac934ad7272d48cd36 |
| ppc64le | pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm | 50de78cdd9a7eb9d765416ef8b6025d0212b9f400834b8309ebacedc54f59186 |
| ppc64le | pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.ppc64le.rpm | 6ffbf1d5a9ac7e89910005c28ad62626a281d20ff5b3c2b7d192e996eaedff85 |
| ppc64le | gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm | 712a5dea1b6588d6dc2c7bf64184d3e7c7614b8bc50c19fb680c2dfc50ed3936 |
| ppc64le | python2-cairo-devel-1.16.3-7.module_el8.10.0+4267+35168c80.ppc64le.rpm | 83f99b5a696dd03da36e5f26f99ac371daf198518ccdf2af1b27e5e7493838fe |
| ppc64le | pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm | d6402a4ecdbde7268b0d20c180c11b9f2e0bad8d4cc43fc3577eaf0c5d9cddd4 |
| ppc64le | gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.ppc64le.rpm | f383688fc0c25a0f0fe1c4360fd75e1a21950af0807d399d886ed514204d5be6 |
| ppc64le | pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.ppc64le.rpm | f97a305654b1e87ac374b3334ecfda6b51a39b3f88cdcae9d1d00dfd9bb468e7 |
| s390x | pygobject2-codegen-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm | 11729e0bcf1a278528b101341c86d3ce8b31ec464dd039e8813ac55b62e939b1 |
| s390x | gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm | 3015a99e4076a62beb5482e0ba89a034bdc7248bbb131763ee643388d5935551 |
| s390x | pygobject2-doc-2.28.7-5.module_el8.10.0+4267+35168c80.s390x.rpm | 353dfd049d13f710bd8624f2bb731074e8e124010ea9f350968ca51d7a2a8729 |
| s390x | pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm | 42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062 |
| s390x | pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm | 43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8 |
| s390x | pygobject2-2.28.7-5.module_el8.10.0+4137+2d0d25cf.s390x.rpm | 5f06e53b0169ce5af9a6ea4e03d05464845aec96e9db0e9b45a2698b3b84e5f5 |
| s390x | gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm | 71358376aae6cc4adab8da1592868e6badffd341e8eb031d44343e4c5389687d |
| s390x | pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm | 753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32 |
| s390x | pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm | 91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476 |
| s390x | python2-cairo-1.16.3-7.module_el8.10.0+4267+35168c80.s390x.rpm | 91bd4eadb7e4cee30ed68b34c252e3d4a326797a2fb8f52ac2cddf02330c327a |
| s390x | gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm | bc87ed45fbb3f5e9d263be725825829ab0b68c824e8a0f15057724d44b7647b0 |
| s390x | python2-cairo-devel-1.16.3-7.module_el8.10.0+4175+c208a0bf.s390x.rpm | c03aa58a0606447844f42ce6aab06400156abb5a6686f9b9ebedbd6ef07d087e |
| s390x | gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.s390x.rpm | d5036d27d0a45b31655b1ce206bc881b15cb0334d1c07e0271d3d3e44d99927c |
| x86_64 | gimp-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm | 168467e32aa9e669b0817183db06e7f477cd7ef680a643bb5243f0a22236be84 |
| x86_64 | pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm | 2f4d1ad704a236fdf89e2a91bad27c1290cc018d37a94b535bfe9b56d51393b8 |
| x86_64 | gimp-devel-tools-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm | 4902b87e4934f5b44f8d38fd8efc086af5e56e8a13f39ed2172f9bf75ff1461a |
| x86_64 | pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.x86_64.rpm | 4992232262cc1d58c37b6a2a7d8c1467b3fa60ef1c10d7cdebe4f1fb6d576372 |
| x86_64 | python2-cairo-devel-1.16.3-7.module_el8.10.0+4175+c208a0bf.x86_64.rpm | 4f1c30f60cc279d37cb13aaaa75a48c1d7c2c2d3c352fb26f3a0d7dfa510609a |
| x86_64 | python2-cairo-1.16.3-7.module_el8.10.0+4175+c208a0bf.x86_64.rpm | 688adf8a59a6393fb89dc781734a27f6c10274f00fc0ba33a7f2d23d2e296963 |
| x86_64 | pygobject2-devel-2.28.7-5.module_el8.10.0+4267+35168c80.x86_64.rpm | 94329879ad86a38fd586f8fb1a0bedf7d54410f266b88b2edf49cae8c291f829 |
| x86_64 | gimp-devel-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm | b8e6caf74dbe64da11ab8e93601adcaedf16391384b2f7ff675c535cefe407a2 |
| x86_64 | pygobject2-codegen-2.28.7-5.module_el8.10.0+4175+c208a0bf.x86_64.rpm | c191203c523dc90fe428a81e470bb7f11fcf1fffa34b6903a0860633e12d0cbb |
| x86_64 | pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm | c31a1d5dc208ac6b26e5a44000795e1e773e1e95a479c0529997765ba24fdcff |
| x86_64 | pygobject2-doc-2.28.7-5.module_el8.10.0+4137+2d0d25cf.x86_64.rpm | c4279688fa7c692a068642dd21bab0943c344cd95617e48f157fb1b1fc467bc2 |
| x86_64 | pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.x86_64.rpm | e091c6387576c98a524580d77825cb438dc432a85725b99800ce9d147fe93ba6 |
| x86_64 | gimp-libs-2.8.22-26.module_el8.10.0+4352+8516153e.10.x86_64.rpm | f8513e350a6be004a5fb1246a4106945cc9b76ad8fdc14dc811a518c5b74e858 |
Sıkça Sorulan Sorular
What is CVE-2026-89147?
It is a denial-of-service flaw in Net-SNMP's SMUX module: newly accepted connections are mishandled, letting an unauthenticated remote attacker block the daemon indefinitely. CVSS 7.5, CWE-400; fixed in USN-8997-1 (November 4, 2026).
Who is affected?
Ubuntu servers running snmpd with SMUX support — monitoring agents on hosting and network infrastructure. Restricting SNMP to monitoring hosts limits, but does not remove, the exposure.
How do I apply the fix?
Run sudo apt update && sudo apt upgrade for the snmp packages and restart snmpd (systemctl restart snmpd). Verify monitoring resumes polling the server afterwards.
Should SMUX be exposed at all?
Rarely — SMUX is a legacy management interface. Best practice is firewalling SNMP to monitoring hosts only and disabling SMUX in snmpd.conf unless actively used, which removes this attack path entirely.
Referanslar
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin