CVE-2014-2285
Fixed in a distro release EPSS 3%
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.
Products: net-snmp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | net-snmp | 5.7.2.1~dfsg-3 |
| Debian 13 | net-snmp | 5.7.2.1~dfsg-3 |
| Debian 14 | net-snmp | 5.7.2.1~dfsg-3 |
| Red Hat Enterprise Linux 5 | net-snmp | 1:5.3.2.2-22.el5_10.1 |
| Red Hat Enterprise Linux 5 | net-snmp-debuginfo | 1:5.3.2.2-22.el5_10.1 |
| Red Hat Enterprise Linux 5 | net-snmp-devel | 1:5.3.2.2-22.el5_10.1 |
| Red Hat Enterprise Linux 5 | net-snmp-libs | 1:5.3.2.2-22.el5_10.1 |
| Red Hat Enterprise Linux 5 | net-snmp-perl | 1:5.3.2.2-22.el5_10.1 |
| Red Hat Enterprise Linux 5 | net-snmp-utils | 1:5.3.2.2-22.el5_10.1 |
| openSUSE Tumbleweed | net-snmp | 5.7.3-8.4 |