PT-2014-1861 · Net Snmp+3 · Net-Snmp+3

Fenner

·

Publicado

2014-03-05

·

Atualizado

2024-06-15

·

CVE-2014-2284

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.5 before 5.5.2.1 Net-SNMP versions 5.6.x before 5.6.2.1 Net-SNMP versions 5.7.x before 5.7.2.1
Description The Linux implementation of the ICMP-MIB in Net-SNMP does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors. The vulnerability can be exploited remotely, leading to a disruption in the availability of protected information.
Recommendations For Net-SNMP versions 5.5 before 5.5.2.1, update to version 5.5.2.1 or later. For Net-SNMP versions 5.6.x before 5.6.2.1, update to version 5.6.2.1 or later. For Net-SNMP versions 5.7.x before 5.7.2.1, update to version 5.7.2.1 or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-07052
BDU:2015-07053
BDU:2015-07054
BDU:2015-07055
BDU:2015-07056
BDU:2015-09112
BDU:2015-09113
BDU:2015-09114
BDU:2015-09115
BDU:2015-09116
CESA-2014_0321
CVE-2014-2284
MGASA-2014-0122
OPENSUSE-SU-2024:10204-1
RHSA-2014:0321
RHSA-2014_0321
SUSE-SU-2014_0524-1

Produtos afetados

Centos
Net-Snmp
Red Hat
Suse