CVE-2014-2284
Fixed in a distro release EPSS 4%
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
Products: net-snmp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | net-snmp | 5.7.2.1~dfsg-3 |
| Debian 13 | net-snmp | 5.7.2.1~dfsg-3 |
| Debian 14 | net-snmp | 5.7.2.1~dfsg-3 |
| Red Hat Enterprise Linux 6 | net-snmp | 1:5.5-49.el6_5.1 |
| Red Hat Enterprise Linux 6 | net-snmp-debuginfo | 1:5.5-49.el6_5.1 |
| Red Hat Enterprise Linux 6 | net-snmp-devel | 1:5.5-49.el6_5.1 |
| Red Hat Enterprise Linux 6 | net-snmp-libs | 1:5.5-49.el6_5.1 |
| Red Hat Enterprise Linux 6 | net-snmp-perl | 1:5.5-49.el6_5.1 |
| Red Hat Enterprise Linux 6 | net-snmp-python | 1:5.5-49.el6_5.1 |
| Red Hat Enterprise Linux 6 | net-snmp-utils | 1:5.5-49.el6_5.1 |
| openSUSE Tumbleweed | net-snmp | 5.7.3-8.4 |