oss-sec mailing list archives
SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out
From: Kurt Seifried <kseifried () redhat com>
Date: Mon, 02 Dec 2013 22:54:32 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just cleaning out old email, ran across this: http://sourceforge.net/p/net-snmp/bugs/2411/ It's a DoS, requires authenticated access but snmpd is often used to monitor a lot of systems not always under your direct control (e.g. read only access). I'm inclined to assign a CVE unless someone objects strongly. - -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBAgAGBQJSnXIYAAoJEBYNRVNeJnmT87AQAJr9IATEMbyfD8FZmoiuu7MK 5HmsknSMS3bFzMFuG9G0S9APCsO25tX9w6+6hBR8T4hPsjlhhs2ADv78QxCf4bkT 7/bD2tDbI2GUM2vJUbdgZWQsOgxI9EX+Lzk6uJ4NN2rcUj+p19LJknbNe0Wv/bLb QcQCUM6bOPnZ19u1Z429dJl4vi7C18TjGjePA6YjxUA2oNALYD/Uurh4GZLFerUh +Q/Zi1JuApZsat96X+qgY0SOjiG1uEcg9pVKMcohilqTqXjaIJiOqi+bEsdDnVeC 8Zrv715Zl2uG2sH+2KQQVbR707Hcwk2YF2BAEBAZWqGyWZxEt9DkLuYevJGs/dUG Ideat5GqHIyBq5N3cWuKhN+/Vc+7c4hTZZxrY2IMmeBfWuW+lUTDR7pmOal2Jbmt XYcaNLGLh/vx+OegTmpGHGas48CesTnw/y/iayHulYSP0dqwgVfvGxGNn9SxSv7P B+D+5pThDavtQsv5CBMmYiZ936zWlfd+ImNlqLiGDVTTdiTc+ikhIVvqkSGUSFHx obXWg1sjqAJdmSv5SaM+gRa2qLeJDgd21N8iKOxNHFjFe7TD02OaOaxUfPj6Krax JOTfd3eCDLJCmrqF26x2gi7IAYVmBLhp7cM+PWBVrEAY0E9IyChk495EgDM0uE38 K9xD2tNTOGVMfIUCkhsa =AAvE -----END PGP SIGNATURE-----
Current thread:
- SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out Kurt Seifried (Dec 02)
- Re: SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out Kurt Seifried (Dec 04)