Updated net-snmp packages fix two vulnerabilities

2014-03-0718:16:46

Gentoo Foundation

advisories.mageia.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.043 Low

EPSS

Percentile

92.2%

JSON

Updated net-snmp packages fix security vulnerabilities: Remotely exploitable denial of service vulnerability in Net-SNMP, in the Linux implementation of the ICMP-MIB, making the SNMP agent vulnerable if it is making use of the ICMP-MIB table objects (CVE-2014-2284). Remotely exploitable denial of service vulnerability in Net-SNMP, in snmptrapd, due to how it handles trap requests with an empty community string when the perl handler is enabled (CVE-2014-2285).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchnet-snmp< 5.7.2-7.2net-snmp-5.7.2-7.2.mga3
Mageia4noarchnet-snmp< 5.7.2-13.1net-snmp-5.7.2-13.1.mga4