CVE-2009-1887
Fixed in a distro release EPSS 2%
agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.
Products: net-snmp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | net-snmp | 0:5.0.9-2.30E.28 |
| Red Hat Enterprise Linux 3 | net-snmp-debuginfo | 0:5.0.9-2.30E.28 |
| Red Hat Enterprise Linux 3 | net-snmp-devel | 0:5.0.9-2.30E.28 |
| Red Hat Enterprise Linux 3 | net-snmp-libs | 0:5.0.9-2.30E.28 |
| Red Hat Enterprise Linux 3 | net-snmp-perl | 0:5.0.9-2.30E.28 |
| Red Hat Enterprise Linux 3 | net-snmp-utils | 0:5.0.9-2.30E.28 |