SOL17378 - SNMP vulnerability CVE-2015-5621

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

USN-2711-1 Net-SNMP Vulnerabilities | Cloud Foundry

USN-2711-1 Net-SNMP Vulnerabilities Low to Medium Vendor Canonical Ubuntu Versions Affected libsnmp30 5.7.2dfsg-8.1ubuntu3.1 Description Net-SNMP could be made to crash or run programs if it received specially crafted network traffic. It was discovered that Net-SNMP incorrectly handled certain tr...

Amazon Linux: Security Advisory (ALAS-2015-590)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : net-snmp (openSUSE-2015-568)

net-snmp was updated to fix one secuirty vulnerability and 2 bugs. - Fix an incompletely initialized vulnerability within the snmppduparse function of snmpapi.c. bnc940188, CVE-2015-5621 - Add build requirement 'procps' to fix a net-snmp-config error. bsc935863 - Stop snmptrapd on removal...

Medium: net-snmp

Issue Overview: It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user...

[USN-2711-1] Net-SNMP vulnerabilities

========================================================================== Ubuntu Security Notice USN-2711-1 August 17, 2015 net-snmp vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2015-5621

CVE-2015-5621 affects net-snmp up to version 5.7.2, where snmp_pdu_parse() may leave incompletely parsed varBind entries when PDU parsing fails. This could allow a remote, unauthenticated attacker to crash snmpd or potentially execute arbitrary code via a crafted packet. Affected products include...

CentOS 6 / 7 : net-snmp (CESA-2015:1636)

Updated net-snmp packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Ubuntu: Security Advisory (USN-2711-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 / 7 : net-snmp (RHSA-2015:1636)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1636 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an...

Scientific Linux Security Update : net-snmp on SL6.x, SL7.x i386/x86_64 (20150817)

It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user running snmpd...

Ubuntu 14.04 LTS : Net-SNMP vulnerabilities (USN-2711-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2711-1 advisory. It was discovered that Net-SNMP incorrectly handled certain trap messages when the -OQ option was used. A remote attacker could use this issue to cause...

RedHat Update for net-snmp RHSA-2015:1636-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Solaris Third-Party Patch Update : ekiga (cve_2012_5621_denial_of)

The remote Solaris system is missing necessary patches to address security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Oracle Third Party software advisories. include'deprecatednasllevel.inc';...

UBUNTU-CVE-2012-5621

lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service crash via an OPAL connection with a party name that contains invalid UTF-8 strings...

CVE-2012-5621

CVE-2012-5621 affects ekiga before 4.0.0 in the component opal-call.cpp. The issue arises when an OPAL connection includes a party name containing invalid UTF-8 strings, which can crash the application and cause a denial of service. The vulnerability is remote and can be triggered without user in...

CVE-2014-5621

The CVE-2014-5621 entry affects the Android app Office Zombie (package com.fluik.OfficeZombieGoogleFree), version 1.3.13. The vulnerability is caused by the app not verifying X.509 certificates when connecting to SSL servers, which allows MITM attackers to spoof servers and obtain sensitive infor...

CVE-2013-5621

...

CVE-2013-5621

CVE-2013-5621 relates to Zoom Telephonics ADSL Modems/Routers (X3, X4, X5, and related models) with unauthenticated access to administrative functions. The connected sources describe multiple vulnerabilities including directory traversal and an unauthenticated execution path that enables bypass o...