The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Net-snmp | Net-snmp | 5.0.1 (including) | 5.0.1 (including) |
| Net-snmp | Net-snmp | 5.0.3 (including) | 5.0.3 (including) |
| Net-snmp | Net-snmp | 5.0.4_pre2 (including) | 5.0.4_pre2 (including) |
| Red Hat Linux 8.0 | RedHat | * |
References
- http://marc.info/?l=bugtraq\u0026m=103359362020365\u0026w=2
- http://sourceforge.net/forum/forum.php?forum_id=216532
- http://www.idefense.com/advisory/10.02.02.txt
- http://www.redhat.com/support/errata/RHSA-2002-228.html
- http://www.securityfocus.com/bid/5862
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10250
- http://marc.info/?l=bugtraq\u0026m=103359362020365\u0026w=2
- http://sourceforge.net/forum/forum.php?forum_id=216532
- http://www.idefense.com/advisory/10.02.02.txt
- http://www.redhat.com/support/errata/RHSA-2002-228.html
- http://www.securityfocus.com/bid/5862
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10250