CVE-2014-3565
Fixed in a distro release EPSS 4%
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
Products: apple mac_os_x, canonical ubuntu_linux, net-snmp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | net-snmp | 5.7.2.1~dfsg-7 |
| Debian 13 | net-snmp | 5.7.2.1~dfsg-7 |
| Debian 14 | net-snmp | 5.7.2.1~dfsg-7 |
| Red Hat Enterprise Linux 6 | net-snmp | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 6 | net-snmp-debuginfo | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 6 | net-snmp-devel | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 6 | net-snmp-libs | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 6 | net-snmp-perl | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 6 | net-snmp-python | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 6 | net-snmp-utils | 1:5.5-54.el6 |
| Red Hat Enterprise Linux 7 | net-snmp | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-agent-libs | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-debuginfo | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-devel | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-gui | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-libs | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-perl | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-python | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-sysvinit | 1:5.7.2-24.el7 |
| Red Hat Enterprise Linux 7 | net-snmp-utils | 1:5.7.2-24.el7 |
| Ubuntu 14.04 LTS | net-snmp | 5.7.2~dfsg-8.1ubuntu3.1 |
| openSUSE Tumbleweed | net-snmp | 5.7.3-8.4 |