FreeBSD : net-snmp -- snmp_pdu_parse() function incomplete initialization (381183e8-3798-11e5-9970-14dae9d210b8)

Qinghao Tang reports : Incompletely initialized vulnerability exists in the function 'snmppduparse' of 'snmpapi.c', and remote attackers can cause memory leak, DOS and possible command executions by sending malicious packets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

FreeBSD : net-snmp -- snmptrapd crash (4622635f-37a1-11e5-9970-14dae9d210b8)

Murray McAllister reports : A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the '-OQ' option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd t...

CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

PT-2015-6988

Name of the Vulnerable Software and Affected Versions net-snmp versions 5.7.2 and earlier Description The issue is related to the snmp pdu parse function in snmp api.c, which does not properly remove the varBind variable from a netsnmp variable list item when parsing of the SNMP PDU fails. This c...

OracleVM 3.3 : net-snmp (OVMSA-2015-0099)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...

UBUNTU-CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

Oracle Linux 6 : net-snmp (ELSA-2015-1385)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1385 advisory. - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is received CVE-2014-3565 Tenable has extracted the preceding description block directly...

net-snmp security and bug fix update

1:5.5-54.0.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-54 - Quicker loading of IP-MIB::ipAddrTable 1191393 1:5.5-53 - Quicker loading of IP-MIB::ipAddressTable 1191393 1:5.5-52 - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is received CVE-2014-3565...

CentOS 6 : net-snmp (CESA-2015:1385)

Updated net-snmp packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

RedHat Update for net-snmp RHSA-2015:1385-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : net-snmp (RHSA-2015:1385)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1385 advisory. - net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type CVE-2014-3565 Note that Nessus has not tested for this iss...

Moderate: Red Hat Security Advisory: net-snmp security and bug fix update

Updated net-snmp packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Net-SNMP Remote Denial of Service Vulnerability

Net-SNMP is an open source set of simple network management protocols. A remote denial of service vulnerability exists in Net-SNMP. An attacker could exploit the vulnerability to crash an affected application and launch a denial-of-service attack...

Mandriva Linux Security Advisory : net-snmp (MDVSA-2015:229)

Updated net-snmp packages fix security vulnerability : It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code...

Updated net-snmp packages fix security vulnerabilities

Updated net-snmp packages fix security vulnerability: It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code...

MGASA-2015-0187 Updated net-snmp packages fix security vulnerabilities

Updated net-snmp packages fix security vulnerability: It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code...

Net-SNMP 'snmp_api.c' Remote Denial of Service Vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A remote denial of service vulnerability exists in Net-SNMP. An attacker could exploit this vulnerability to cause a denial of...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information

The net-snmp-utils-5.3.2.2 package on the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the net-snmp-5.0.9 package of the Red Hat Linux operating system can lead to violations of confidentiality and integrity of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net-snmp-5.0.9 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...