Mini-SNMPD Stack Buffer Overflow Vulnerability

Mini-SNMPD is a lightweight implementation of the Simple Network Management Protocol SNMP server. A stack buffer overflow vulnerability exists in Mini-SNMPD 1.4. An attacker could exploit this vulnerability by initiating multiple connections to the server resulting in a denial of service...

Mini-SNMPD Out-of-Bounds Read Vulnerability (CNVD-2020-08117)

Mini-SNMPD is a lightweight implementation of the Simple Network Management Protocol SNMP server. An out-of-bounds read vulnerability exists in the way Mini-SNMPD 1.4 parses incoming SNMP packets. An attacker could exploit this vulnerability by sending specially crafted packets to cause sensitive...

Vulnerability Spotlight: Denial-of-service, information leak bugs in Mini-SNMPD

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Multiple vulnerabilities exist in Mini-SNMPD, a lightweight implementation of a Simple Network Management Protocol server. An attacker can exploit these bugs by providing a specially crafted SNMPD request to...

Mini-SNMPD socket disconnect denial-of-service vulnerability

Talos Vulnerability Report TALOS-2019-0977 Mini-SNMPD socket disconnect denial-of-service vulnerability February 3, 2020 CVE Number CVE-2020-6060 Summary A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP...

Mini-SNMPD decode_int Information Leak Vulnerability

Summary An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger...

Mini-SNMPD socket disconnect denial-of-service vulnerability

Summary A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate...

Mini-SNMPD decode_cnt information leak vulnerability

Summary An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger th...

Mini-SNMPD decode_int Information Leak Vulnerability

Talos Vulnerability Report TALOS-2019-0976 Mini-SNMPD decodeint Information Leak Vulnerability February 3, 2020 CVE Number CVE-2020-6059 Summary An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request c...