Red Hat Security AdvisoryRHSA-2015:1636
net-snmp security update
Released 2015-08-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) net-snmp-1:5.7.2-20.el7_1.1, net-snmp-agent-libs-1:5.7.2-20.el7_1.1, net-snmp-libs-1:5.7.2-20.el7_1.1 +1
- Red Hat Enterprise Linux Client Optional (v. 7) net-snmp-devel-1:5.7.2-20.el7_1.1, net-snmp-gui-1:5.7.2-20.el7_1.1, net-snmp-perl-1:5.7.2-20.el7_1.1 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) net-snmp-1:5.7.2-20.el7_1.1, net-snmp-agent-libs-1:5.7.2-20.el7_1.1, net-snmp-libs-1:5.7.2-20.el7_1.1 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) net-snmp-devel-1:5.7.2-20.el7_1.1, net-snmp-gui-1:5.7.2-20.el7_1.1, net-snmp-perl-1:5.7.2-20.el7_1.1 +2
- Red Hat Enterprise Linux Desktop (v. 6) net-snmp-1:5.5-54.el6_7.1, net-snmp-libs-1:5.5-54.el6_7.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) net-snmp-devel-1:5.5-54.el6_7.1, net-snmp-perl-1:5.5-54.el6_7.1, net-snmp-python-1:5.5-54.el6_7.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) net-snmp-1:5.5-54.el6_7.1, net-snmp-libs-1:5.5-54.el6_7.1, net-snmp-perl-1:5.5-54.el6_7.1 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) net-snmp-devel-1:5.5-54.el6_7.1
- Red Hat Enterprise Linux Server (v. 6) net-snmp-1:5.5-54.el6_7.1, net-snmp-devel-1:5.5-54.el6_7.1, net-snmp-devel-1:5.5-54.el6_7.1.ppc +5
- Red Hat Enterprise Linux Server (v. 7) net-snmp-1:5.7.2-20.ael7b_1.1, net-snmp-1:5.7.2-20.el7_1.1, net-snmp-agent-libs-1:5.7.2-20.ael7b_1.1 +10
- Red Hat Enterprise Linux Server Optional (v. 7) net-snmp-gui-1:5.7.2-20.ael7b_1.1, net-snmp-gui-1:5.7.2-20.el7_1.1, net-snmp-perl-1:5.7.2-20.ael7b_1.1 +5
- Red Hat Enterprise Linux Workstation (v. 6) net-snmp-1:5.5-54.el6_7.1, net-snmp-devel-1:5.5-54.el6_7.1, net-snmp-libs-1:5.5-54.el6_7.1 +3
- Red Hat Enterprise Linux Workstation (v. 7) net-snmp-1:5.7.2-20.el7_1.1, net-snmp-agent-libs-1:5.7.2-20.el7_1.1, net-snmp-devel-1:5.7.2-20.el7_1.1 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) net-snmp-gui-1:5.7.2-20.el7_1.1, net-snmp-perl-1:5.7.2-20.el7_1.1, net-snmp-python-1:5.7.2-20.el7_1.1 +1
Fixes 2 records
Priority HIGH 72
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a de…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.38322 · Published 2015-08-19 · Fixed CWE-190
Priority MEDIUM 51
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06291 · Published 2018-03-07 · Partial fix CWE-787
