CVE-2014-3565

Currently unrated

Key Information:

Vendor
Apple
Status
Mac Os X
Ubuntu Linux
Vendor
CVE Published:
7 October 2014

Summary

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

References

http://lists.apple.com/archives/security-announce/2015/Oc...
vendor-advisoryx_refsource_APPLE
https://support.apple.com/HT205375
x_refsource_CONFIRM
http://sourceforge.net/p/net-snmp/code/ci/7f4a7b891332899...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.