CVE-2014-2285

🗓️ 05 Mar 2014 00:00:00Reported by ubuntu.comType

The perl_trapd_handler in Net-SNMP 5.7.3.pre3 and earlier, with certain Perl versions, allows remote attackers to cause a denial of service via an empty community string in an SNMP trap, triggering a NULL pointer dereference in Perl's newSVpv function

Reporter	Title	Published	Views	Family All 64
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	12.04	all	net-snmp	5.4.3~dfsg-2.4ubuntu1.2	net-snmp_5.4.3~dfsg-2.4ubuntu1.2_all.deb
Ubuntu	10.04	all	net-snmp	5.4.2.1~dfsg0ubuntu1-0ubuntu2.3	net-snmp_5.4.2.1~dfsg0ubuntu1-0ubuntu2.3_all.deb
Ubuntu	12.10	all	net-snmp	5.4.3~dfsg-2.5ubuntu1.1	net-snmp_5.4.3~dfsg-2.5ubuntu1.1_all.deb
Ubuntu	13.10	all	net-snmp	5.7.2~dfsg-8ubuntu1.1	net-snmp_5.7.2~dfsg-8ubuntu1.1_all.deb

Source	Link
openwall	www.openwall.com/lists/oss-security/2014/03/05/2
ubuntu	www.ubuntu.com/security/notices/USN-2166-1
cve	www.cve.org/CVERecord

24 Jul 2024 15:57Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

EPSS0.0331