Array Index Error in Net-SNMP Leads to Denial of Service Vulnerability
CVE-2012-2141

Currently unrated

Key Information:

Vendor

Net-snmp

Status
Net-snmp
Vendor
CVE Published:
14 August 2012

What is CVE-2012-2141?

The vulnerability in Net-SNMP version 5.7.1 arises from an array index error in the handle_nsExtendOutput2Table function. This defect allows remote authenticated users to execute a denial of service attack by sending an SNMP GET request for entries not present in the extension table, leading to an out-of-bounds read and crashing the snmpd process. This error can disrupt service and potentially expose sensitive information, creating significant security concerns for users relying on SNMP for network management.

References

http://www.openwall.com/lists/oss-security/2012/04/26/3
mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2013-0124.html
vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/75169
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.