CVE-2008-4309

2008-10-3100:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.049

Percentile

92.8%

JSON

Integer overflow in the netsnmp_create_subtree_cache function in
agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and
5.2 before 5.2.5.1 allows remote attackers to cause a denial of service
(crash) via a crafted SNMP GETBULK request, which triggers a heap-based
buffer overflow, related to the number of responses or repeats.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchnet-snmp< 5.2.1.2-4ubuntu2.3UNKNOWN
ubuntu7.10noarchnet-snmp< 5.3.1-6ubuntu2.2UNKNOWN
ubuntu8.04noarchnet-snmp< 5.4.1~dfsg-4ubuntu4.2UNKNOWN
ubuntu8.10noarchnet-snmp< 5.4.1~dfsg-7.1ubuntu6.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	net-snmp	< 5.2.1.2-4ubuntu2.3	UNKNOWN
ubuntu	7.10	noarch	net-snmp	< 5.3.1-6ubuntu2.2	UNKNOWN
ubuntu	8.04	noarch	net-snmp	< 5.4.1~dfsg-4ubuntu4.2	UNKNOWN
ubuntu	8.10	noarch	net-snmp	< 5.4.1~dfsg-7.1ubuntu6.1	UNKNOWN