Lucene search

K
freebsdFreeBSD381183E8-3798-11E5-9970-14DAE9D210B8
HistoryApr 11, 2015 - 12:00 a.m.

net-snmp -- snmp_pdu_parse() function incomplete initialization

2015-04-1100:00:00
vuxml.freebsd.org
17

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.082 Low

EPSS

Percentile

94.3%

Qinghao Tang reports:

Incompletely initialized vulnerability exists in the function
‘snmp_pdu_parse()’ of ‘snmp_api.c’, and remote attackers can cause memory
leak, DOS and possible command executions by sending malicious packets.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchnet-snmp<= 5.7.3_7UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.082 Low

EPSS

Percentile

94.3%