Red Hat Security AdvisoryRHSA-2007:1045
net-snmp security update
Released 2007-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 net-snmp-5.0.9-2.30E.23, net-snmp-5.0.9-2.30E.23.i386, net-snmp-devel-5.0.9-2.30E.23 +7
- Red Hat Enterprise Linux (v. 5 server) net-snmp-1:5.3.1-19.el5_1.1, net-snmp-1:5.3.1-19.el5_1.1.i386, net-snmp-1:5.3.1-19.el5_1.1.ia64 +17
- Red Hat Enterprise Linux AS version 3 net-snmp-5.0.9-2.30E.23, net-snmp-5.0.9-2.30E.23.i386, net-snmp-5.0.9-2.30E.23.ia64 +17
- Red Hat Enterprise Linux AS version 4 net-snmp-5.1.2-11.el4_6.11.1, net-snmp-5.1.2-11.el4_6.11.1.i386, net-snmp-5.1.2-11.el4_6.11.1.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) net-snmp-1:5.3.1-19.el5_1.1, net-snmp-1:5.3.1-19.el5_1.1.i386, net-snmp-libs-1:5.3.1-19.el5_1.1 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) net-snmp-1:5.3.1-19.el5_1.1, net-snmp-devel-1:5.3.1-19.el5_1.1, net-snmp-devel-1:5.3.1-19.el5_1.1.i386
- Red Hat Enterprise Linux Desktop version 4 net-snmp-5.1.2-11.el4_6.11.1, net-snmp-5.1.2-11.el4_6.11.1.i386, net-snmp-devel-5.1.2-11.el4_6.11.1 +7
- Red Hat Enterprise Linux ES version 3 net-snmp-5.0.9-2.30E.23, net-snmp-5.0.9-2.30E.23.i386, net-snmp-5.0.9-2.30E.23.ia64 +12
- Red Hat Enterprise Linux ES version 4 net-snmp-5.1.2-11.el4_6.11.1, net-snmp-5.1.2-11.el4_6.11.1.i386, net-snmp-5.1.2-11.el4_6.11.1.ia64 +12
- Red Hat Enterprise Linux WS version 3 net-snmp-5.0.9-2.30E.23, net-snmp-5.0.9-2.30E.23.i386, net-snmp-5.0.9-2.30E.23.ia64 +12
- Red Hat Enterprise Linux WS version 4 net-snmp-5.1.2-11.el4_6.11.1, net-snmp-5.1.2-11.el4_6.11.1.i386, net-snmp-5.1.2-11.el4_6.11.1.ia64 +12
Fixes 1 record
Priority MEDIUM 57
The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.29178 · Published 2007-11-06 · Fixed CWE-399
