Multiple vulnerabilities have been discovered in Net-SNMP, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.9.2 | >= 5.9.2 |
Net-SNMP is a suite of applications used to implement the Simple Network Management Protocol.
Multiple vulnerabilities have been discovered in Net-SNMP. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Net-SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.9.2"
Multiple vulnerabilities have been found in Net-SNMP, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.8.1_pre1 | >= 5.8.1_pre1 |
Net-SNMP bundles software for generating and retrieving SNMP data.
Multiple vulnerabilities have been discovered in Net-SNMP. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Net-SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.8.1_pre1"
A vulnerability in SNMP could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.7.3_pre5-r1 | >= 5.7.3_pre5-r1 |
SNMP is a widely used protocol for monitoring the health and welfare of network equipment.
A specially crafted trap message triggers a conversion to an erroneous variable type when the -OQ option is used.
A remote attacker could possibly cause a Denial of Service condition.
There is no known workaround at this time.
All SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.7.3_pre5-r1"
Multiple vulnerabilities have been found in Net-SNMP which could allow remote attackers to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.7.3_pre3 | >= 5.7.3_pre3 |
Net-SNMP bundles software for generating and retrieving SNMP data.
Multiple vulnerabilities have been discovered in Net-SNMP. Please review the CVE identifiers referenced below for details.
A remote attacker could create a Denial of Service condition.
There is no known workaround at this time.
All net-snmp users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.7.3_pre3"
A remote attacker can bypass the tcp-wrappers client authorization in net-snmp.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.4.2.1-r1 | >= 5.4.2.1-r1 |
net-snmp bundles software for generating and retrieving SNMP data.
The netsnmp_udp_fmtaddr() function (snmplib/snmpUDPDomain.c), when using TCP wrappers for client authorization, does not properly parse hosts.allow rules.
A remote, unauthenticated attacker could bypass the ACL filtering, possibly resulting in the execution of arbitrary SNMP queries.
If possible, protect net-snmp with custom iptables rules:
iptables -s [client] -d [host] -p udp --dport 161 -j ACCEPT iptables -s 0.0.0.0/0 -d [host] -p udp --dport 161 -j DROP
All net-snmp users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.4.2.1-r1"
A vulnerability in Net-SNMP could lead to a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.4.2.1 | >= 5.4.2.1 |
Net-SNMP is a collection of tools for generating and retrieving SNMP data.
Oscar Mira-Sanchez reported an integer overflow in the netsnmp_create_subtree_cache() function in agent/snmp_agent.c when processing GETBULK requests.
A remote attacker could send a specially crafted request to crash the SNMP server. NOTE: The attacker needs to know the community string to exploit this vulnerability.
Restrict access to trusted entities only.
All Net-SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.4.2.1"
Multiple vulnerabilities in Net-SNMP allow for authentication bypass in snmpd and execution of arbitrary code in Perl applications using Net-SMNP.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.4.1.1 | >= 5.4.1.1 |
Net-SNMP is a collection of tools for generating and retrieving SNMP data. The SNMPv3 protocol uses a keyed-Hash Message Authentication Code (HMAC) to verify data integrity and authenticity of SNMP messages.
Wes Hardaker reported that the SNMPv3 HMAC verification relies on the client to specify the HMAC length (CVE-2008-0960). John Kortink reported a buffer overflow in the Perl bindings of Net-SNMP when processing the OCTETSTRING in an attribute value pair (AVP) received by an SNMP agent (CVE-2008-2292).
An attacker could send SNMPv3 packets to an instance of snmpd providing a valid user name and an HMAC length value of 1, and easily conduct brute-force attacks to bypass SNMP authentication. An attacker could further entice a user to connect to a malicious SNMP agent with an SNMP client using the Perl bindings, possibly resulting in the execution of arbitrary code.
There is no known workaround at this time.
All Net-SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.4.1.1"
A Denial of Service vulnerability has been discovered in Net-SNMP when processing GETBULK requests.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.4.1-r1 | >= 5.4.1-r1 |
Net-SNMP is a collection of tools for generating and retrieving SNMP data.
The SNMP agent (snmpd) does not properly handle GETBULK requests with an overly large "max-repetitions" field.
A remote unauthenticated attacker could send a specially crafted SNMP request to the vulnerable application, possibly resulting in a high CPU and memory consumption.
There is no known workaround at this time.
All Net-SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.4.1-r1"
The Gentoo Net-SNMP package may provide Perl modules containing an insecure DT_RPATH, potentially allowing privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.2.1.2-r1 | >= 5.2.1.2-r1 |
Net-SNMP is a suite of applications used to implement the Simple Network Management Protocol.
James Cloos reported that Perl modules from the Net-SNMP package look for libraries in an untrusted location. This is due to a flaw in the Gentoo package, and not the Net-SNMP suite.
A local attacker (member of the portage group) may be able to create a shared object that would be loaded by the Net-SNMP Perl modules, executing arbitrary code with the privileges of the user invoking the Perl script.
Limit group portage access to trusted users.
All Net-SNMP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.2.1.2-r1"
Net-SNMP creates temporary files in an insecure manner, possibly allowing the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/net-snmp | * | < 5.2.1-r1 | >= 5.2.1-r1 |
Net-SNMP is a suite of applications used to implement the Simple Network Management Protocol.
The fixproc application of Net-SNMP creates temporary files with predictable filenames.
A malicious local attacker could exploit a race condition to change the content of the temporary files before they are executed by fixproc, possibly leading to the execution of arbitrary code. A local attacker could also create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When fixproc is executed, this would result in the file being overwritten.
There is no known workaround at this time.
All Net-SNMP users should upgrade to the latest available version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/net-snmp-5.2.1-r1"