SUSE-SU-2015:1556-1 Security update for net-snmp

The following issues have been fixed within this update: fix btrfs output inside HOST-RESOURCES-MIB::hrStorageDescr. bsc909479 fix an incompletely initialized vulnerability within the snmppduparse function of snmpapi.c. bsc940188, CVE-2015-5621 add build requirement 'procps' to fix a...

Windows User Name Detection via SNMP

Binary data 8839.prm...

Windows User Name Detection via SNMP

Binary data 7179.pasl...

DEBIAN-CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

Design/Logic Flaw

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

CVE-2015-5621

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

CVE-2015-5621

CVE-2015-5621 affects net-snmp up to version 5.7.2, where snmp_pdu_parse() may leave incompletely parsed varBind entries when PDU parsing fails. This could allow a remote, unauthenticated attacker to crash snmpd or potentially execute arbitrary code via a crafted packet. Affected products include...

OracleVM 3.3 : net-snmp (OVMSA-2015-0116)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Fixed parsing of invalid variables in incoming packets 1248410 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...

CentOS 6 / 7 : net-snmp (CESA-2015:1636)

Updated net-snmp packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 6 / 7 : net-snmp (ELSA-2015-1636)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1636 advisory. 1:5.5-54.0.1.el67.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-54.el67.1 - Fixed parsing of invalid variables in incoming packets 12484...

Ubuntu 14.04 LTS : Net-SNMP vulnerabilities (USN-2711-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2711-1 advisory. It was discovered that Net-SNMP incorrectly handled certain trap messages when the -OQ option was used. A remote attacker could use this issue to cause...

RHEL 6 / 7 : net-snmp (RHSA-2015:1636)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1636 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an...

Scientific Linux Security Update : net-snmp on SL6.x, SL7.x i386/x86_64 (20150817)

It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user running snmpd...

Ubuntu: Security Advisory (USN-2711-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for net-snmp CESA-2015:1636 centos6

Check the version of net-snmp SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882246";...

CentOS Update for net-snmp CESA-2015:1636 centos7

Check the version of net-snmp SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882249";...