PT-2007-7472 · Debian+2 · Debian+2

Bill Trost · Published 1970-01-01 · Updated 2018-10-15 · CVE-2007-5846

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions net-snmp versions prior to 5.4.1

Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory via a GETBULK request with a large max-repeaters value. Multiple vulnerabilities in the net-snmp package of Debian GNU/Linux can be exploited remotely, leading to disruption of protected information availability.

Recommendations For net-snmp versions prior to 5.4.1, update to version 5.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SNMP agent to minimize the risk of exploitation. Avoid using large max-repeaters values in GETBULK requests until the issue is resolved.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-01403

BDU:2015-01404

BDU:2015-01405

BDU:2015-01406

BDU:2015-01407

BDU:2015-01408

BDU:2015-01409

CVE-2007-5846

DSA-1483-1

DTSA-88-1

RHSA-2007:1045

RHSA-2007_1045

Affected Products

Debian

Red Hat

Net-Snmp

References · 44

• https://bdu.fstec.ru/vul/2015-01409 · Security Note
• http://vupen.com/english/advisories/2007/3802 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-5846 · Vendor Advisory
• http://secunia.com/advisories/27965 · Vendor Advisory
• http://secunia.com/advisories/28825 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5846 · Security Note
• http://novell.com/linux/security/advisories/2007_25_sr.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01403 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-5846 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01404 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5846 · Security Note
• https://bdu.fstec.ru/vul/2015-01405 · Security Note
• http://secunia.com/advisories/27733 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01408 · Security Note
• http://secunia.com/advisories/29785 · Vendor Advisory