Lucene search

K
mageiaGentoo FoundationMGASA-2014-0019
HistoryJan 21, 2014 - 8:16 p.m.

Updated net-snmp packages fix CVE-2012-6151

2014-01-2120:16:21
Gentoo Foundation
advisories.mageia.org
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.147 Low

EPSS

Percentile

95.7%

Updated net-snmp packages fix security vulnerability: Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout (CVE-2012-6151). This update also fixes two other minor issues: IPADDRESS size in python-netsnmp on 64-bit systems and adding btrfs support to hrFSTable.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchnet-snmp< 5.7.2-7.1net-snmp-5.7.2-7.1.mga3

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.147 Low

EPSS

Percentile

95.7%