net security update

2007-11-1519:23:48

CentOS Project

lists.centos.org

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.796 High

EPSS

Percentile

98.2%

JSON

CentOS Errata and Security Advisory CESA-2007:1045

Simple Network Management Protocol (SNMP) is a protocol used for network
management.

A flaw was discovered in the way net-snmp handled certain requests. A
remote attacker who can connect to the snmpd UDP port (161 by default)
could send a malicious packet causing snmpd to crash, resulting in a
denial of service. (CVE-2007-5846)

All users of net-snmp are advised to upgrade to these updated packages,
which contain a backported patch to resolve this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-November/076595.html
https://lists.centos.org/pipermail/centos-announce/2007-November/076601.html
https://lists.centos.org/pipermail/centos-announce/2007-November/076602.html
https://lists.centos.org/pipermail/centos-announce/2007-November/076605.html
https://lists.centos.org/pipermail/centos-announce/2007-November/076614.html
https://lists.centos.org/pipermail/centos-announce/2007-November/076615.html

Affected packages:
net-snmp
net-snmp-devel
net-snmp-libs
net-snmp-perl
net-snmp-utils

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:1045

OSVersionArchitecturePackageVersionFilename
CentOS4ia64net-snmp-devel< 5.1.2-11.c4.11.1net-snmp-devel-5.1.2-11.c4.11.1.ia64.rpm
CentOS4ia64net-snmp-libs< 5.1.2-11.c4.11.1net-snmp-libs-5.1.2-11.c4.11.1.ia64.rpm
CentOS4ia64net-snmp-perl< 5.1.2-11.c4.11.1net-snmp-perl-5.1.2-11.c4.11.1.ia64.rpm
CentOS4ia64net-snmp-utils< 5.1.2-11.c4.11.1net-snmp-utils-5.1.2-11.c4.11.1.ia64.rpm
CentOS3i386net-snmp< 5.0.9-2.30E.23net-snmp-5.0.9-2.30E.23.i386.rpm
CentOS3i386net-snmp-devel< 5.0.9-2.30E.23net-snmp-devel-5.0.9-2.30E.23.i386.rpm
CentOS3i386net-snmp-libs< 5.0.9-2.30E.23net-snmp-libs-5.0.9-2.30E.23.i386.rpm
CentOS3i386net-snmp-perl< 5.0.9-2.30E.23net-snmp-perl-5.0.9-2.30E.23.i386.rpm
CentOS3i386net-snmp-utils< 5.0.9-2.30E.23net-snmp-utils-5.0.9-2.30E.23.i386.rpm
CentOS3x86_64net-snmp< 5.0.9-2.30E.23net-snmp-5.0.9-2.30E.23.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	net-snmp-devel	< 5.1.2-11.c4.11.1	net-snmp-devel-5.1.2-11.c4.11.1.ia64.rpm
CentOS	4	ia64	net-snmp-libs	< 5.1.2-11.c4.11.1	net-snmp-libs-5.1.2-11.c4.11.1.ia64.rpm
CentOS	4	ia64	net-snmp-perl	< 5.1.2-11.c4.11.1	net-snmp-perl-5.1.2-11.c4.11.1.ia64.rpm
CentOS	4	ia64	net-snmp-utils	< 5.1.2-11.c4.11.1	net-snmp-utils-5.1.2-11.c4.11.1.ia64.rpm
CentOS	3	i386	net-snmp	< 5.0.9-2.30E.23	net-snmp-5.0.9-2.30E.23.i386.rpm
CentOS	3	i386	net-snmp-devel	< 5.0.9-2.30E.23	net-snmp-devel-5.0.9-2.30E.23.i386.rpm
CentOS	3	i386	net-snmp-libs	< 5.0.9-2.30E.23	net-snmp-libs-5.0.9-2.30E.23.i386.rpm
CentOS	3	i386	net-snmp-perl	< 5.0.9-2.30E.23	net-snmp-perl-5.0.9-2.30E.23.i386.rpm
CentOS	3	i386	net-snmp-utils	< 5.0.9-2.30E.23	net-snmp-utils-5.0.9-2.30E.23.i386.rpm
CentOS	3	x86_64	net-snmp	< 5.0.9-2.30E.23	net-snmp-5.0.9-2.30E.23.x86_64.rpm