QwikSec

Security Database

CVE

CWE

Training

CVE-2014-3565

Published: Oct 7, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

APPLE-SA-2015-10-21-4

vendor-advisory

x_refsource_APPLE

https://support.apple.com/HT205375

x_refsource_CONFIRM

http://sourceforge.net/p/net-snmp/code/ci/7f4a7b891332899cea26e95be0337aae01648742/

x_refsource_CONFIRM

http://sourceforge.net/p/net-snmp/official-patches/48/

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2014:1108

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_GENTOO

https://bugzilla.redhat.com/show_bug.cgi?id=1125155

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.