Updated net-snmp packages fix CVE-2014-3565

2014-09-0513:07:37

Gentoo Foundation

advisories.mageia.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.075 Low

EPSS

Percentile

94.1%

JSON

Updated net-snmp packages fix security vulnerabilities: A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the “-OQ” option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to crash (CVE-2014-3565).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchnet-snmp< 5.7.2-7.3net-snmp-5.7.2-7.3.mga3
Mageia4noarchnet-snmp< 5.7.2-13.2net-snmp-5.7.2-13.2.mga4