SNMP Vulnerability in Net-SNMP Affecting Multiple Vendors

CVE-2014-3565

Summary

The vulnerability in net-snmp versions 5.7.0 and earlier arises when the -OQ option is used, allowing remote attackers to exploit crafted SNMP trap messages. This exploitation leads to the remote execution of a denial of service attack by triggering a crash of the snmptrapd service. Specifically, this occurs due to a type conversion issue in the MIB file, often demonstrated by an unexpected NULL type in an ifMtu trap message, which results in instability of the SNMP service.

References