CentOS Errata and Security Advisory CESA-2014:0321
The net-snmp packages provide various libraries and tools for the Simple
Network Management Protocol (SNMP), including an SNMP library, an
extensible agent, tools for requesting or setting information from SNMP
agents, tools for generating and handling SNMP traps, a version of the
netstat command which uses SNMP, and a Tk/Perl Management Information Base
(MIB) browser.
A buffer overflow flaw was found in the way the decode_icmp_msg() function
in the ICMP-MIB implementation processed Internet Control Message Protocol
(ICMP) message statistics reported in the /proc/net/snmp file. A remote
attacker could send a message for each ICMP message type, which could
potentially cause the snmpd service to crash when processing the
/proc/net/snmp file. (CVE-2014-2284)
This update also fixes the following bug:
All net-snmp users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. After installing this
update, the snmpd service will be restarted automatically.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2014-March/082386.html
Affected packages:
net-snmp
net-snmp-devel
net-snmp-libs
net-snmp-perl
net-snmp-python
net-snmp-utils
Upstream details at:
https://access.redhat.com/errata/RHSA-2014:0321
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 6 | i686 | net-snmp | <Â 5.5-49.el6_5.1 | net-snmp-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | i686 | net-snmp-devel | <Â 5.5-49.el6_5.1 | net-snmp-devel-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | i686 | net-snmp-libs | <Â 5.5-49.el6_5.1 | net-snmp-libs-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | i686 | net-snmp-perl | <Â 5.5-49.el6_5.1 | net-snmp-perl-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | i686 | net-snmp-python | <Â 5.5-49.el6_5.1 | net-snmp-python-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | i686 | net-snmp-utils | <Â 5.5-49.el6_5.1 | net-snmp-utils-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | x86_64 | net-snmp | <Â 5.5-49.el6_5.1 | net-snmp-5.5-49.el6_5.1.x86_64.rpm |
CentOS | 6 | i686 | net-snmp-devel | <Â 5.5-49.el6_5.1 | net-snmp-devel-5.5-49.el6_5.1.i686.rpm |
CentOS | 6 | x86_64 | net-snmp-devel | <Â 5.5-49.el6_5.1 | net-snmp-devel-5.5-49.el6_5.1.x86_64.rpm |
CentOS | 6 | i686 | net-snmp-libs | <Â 5.5-49.el6_5.1 | net-snmp-libs-5.5-49.el6_5.1.i686.rpm |