Denial of Service Vulnerability in Net-SNMP by Net-SNMP

CVE-2012-6151

Summary

The vulnerability in Net-SNMP versions 5.7.1 and earlier affects the AgentX protocol, which can be exploited by remote attackers. By manipulating MIB registration and GETNEXT requests, an attacker can trigger a situation where the AgentX subagent experiences timeouts, resulting in a denial of service that may manifest as a crash, infinite loops, increased CPU consumption, or system hangs. This can adversely impact systems relying on SNMP for network management, making them unresponsive and degrading overall service.

References