Lucene search

K
f5F5F5:K16476
HistoryJul 24, 2015 - 12:00 a.m.

K16476 : NET-SNMP vulnerability CVE-2012-6151

2015-07-2400:00:00
my.f5.com
11

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.144 Low

EPSS

Percentile

95.2%

Security Advisory Description

Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout. (CVE-2012-6151)
Impact
If an attacker can disrupt or delay SNMP messages, it is possible to cause an SNMP daemon crash or excessive CPU usage. Partial availability impact as SNMP services are not required for the Traffic Management Microkernel (TMM) to process traffic.

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.144 Low

EPSS

Percentile

95.2%