Denial of Service Vulnerability in Net-SNMP AgentX Subagent
CVE-2014-2310

Currently unrated

Key Information:

Vendor

Net-snmp

Status
Net-snmp
Vendor
CVE Published:
17 April 2014

What is CVE-2014-2310?

The AgentX subagent in Net-SNMP versions prior to 5.4.4 is prone to a denial of service condition. Remote attackers can exploit this vulnerability by sending a multi-object request containing an Object ID (OID) with a greater number of sub-identifiers (subids) than those found in earlier requests. This exploitation leads to a service hang, impacting the availability of the affected implementation.

References

http://secunia.com/advisories/57870
third-party-advisoryx_refsource_SECUNIA
http://sourceforge.net/p/net-snmp/patches/1113/
x_refsource_CONFIRM
http://seclists.org/oss-sec/2014/q1/513
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.