Net-SNMP Agent MIB Subtree Remote Denial of Service Vulnerability

Bugtraq ID:	53258
Class:	Input Validation Error
CVE:	CVE-2012-2141
Remote:	Yes
Local:	No
Published:	Apr 26 2012 12:00AM
Updated:	Apr 13 2015 08:01PM
Credit:	Sergio Freire
Vulnerable:	Net-SNMP Net-SNMP 5.7.1 Gentoo Linux
Not Vulnerable:

Net-SNMP Agent MIB Subtree Remote Denial of Service Vulnerability

Net-SNMP is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

Net-SNMP 5.7.1 is vulnerable; other versions may also be affected.

Net-SNMP Agent MIB Subtree Remote Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

Net-SNMP Agent MIB Subtree Remote Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Net-SNMP Agent MIB Subtree Remote Denial of Service Vulnerability

References:

• Array index error, leading to out-of heap-based buffer read (snmpd crash) (Jan Lieskovsky)
  
• Array index error, leading to out-of heap-based buffer read (snmpd crash) (Jan Lieskovsky)
  
• Net-SNMP Homepage (Net-SNMP)