Wind River Support Network

HomeDefectsCGP6-490
Fixed

CGP6-490 : Security Advisory - net-snmp - CVE-2014-3565

Created: Oct 14, 2014    Updated: Dec 3, 2018
Resolved Date: Nov 24, 2014
Found In Version: 6.0.0.15
Fix Version: 6.0.0.15
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3565

Other Downloads


Live chat
Online