Lucene search

K
freebsdFreeBSD4622635F-37A1-11E5-9970-14DAE9D210B8
HistoryJul 31, 2014 - 12:00 a.m.

net-snmp -- snmptrapd crash

2014-07-3100:00:00
vuxml.freebsd.org
15

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.075 Low

EPSS

Percentile

94.1%

Murray McAllister reports:

A remote denial-of-service flaw was found in the way
snmptrapd handled certain SNMP traps when started with the
“-OQ” option. If an attacker sent an SNMP trap containing a
variable with a NULL type where an integer variable type was
expected, it would cause snmptrapd to crash.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchnet-snmp= 5.7.0UNKNOWN
FreeBSDanynoarchnet-snmp<= 5.7.2.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.075 Low

EPSS

Percentile

94.1%