NetSight
IP …
medium5.0

CVE-2014-3565

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted …

Impact

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Affected products

VendorProductAffected versions
AppleMac Os X
Version 10.11.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
Net-SnmpNet-Snmp
through 5.7.0
Versions 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4

Weakness classification

CWE-399

References