Net-SNMP ICMP-MIB Remote Denial of Service Vulnerability

Bugtraq ID:	65867
Class:	Input Validation Error
CVE:	CVE-2014-2284
Remote:	Yes
Local:	No
Published:	Feb 27 2014 12:00AM
Updated:	Apr 13 2015 09:31PM
Credit:	The vendor reported this issue.
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Net-SNMP Net-SNMP 5.7.1 IBM Tivoli Storage Productivity Center 4.2.1 Gentoo Linux CentOS CentOS 6
Not Vulnerable:

Net-SNMP ICMP-MIB Remote Denial of Service Vulnerability

Net-SNMP is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

Versions prior to Net-SNMP 5.7.2.1 are vulnerable.

Net-SNMP ICMP-MIB Remote Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

Net-SNMP ICMP-MIB Remote Denial of Service Vulnerability

References:

• Net-SNMP Homepage (Net-SNMP)
  
• Version 5.7.2.1 of Net-SNMP (Net-SNMP )
  
• net-snmp security and bug fix update (RHSA-2014-0321) (Avaya)
  
• Security Bulletin: Tivoli Storage Productivity Center is affected by the followi (IBM)