Date: Mon, 01 Sep 2014 10:53:37 +1000 From: Murray McAllister <mmcallis@...hat.com> To: oss-security@...ts.openwall.com Subject: CVE-2014-3565, net-snmp: snmptrapd crash Good morning, CVE-2014-3565 was assigned to the following: A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to crash. http://sourceforge.net/p/net-snmp/code/ci/7f4a7b891332899cea26e95be0337aae01648742/ https://bugzilla.redhat.com/show_bug.cgi?id=1125155 Upstream do not consider it a serious issue as very few people use the "-OQ" option. It should be fixed in a new release due soon. -- Murray McAllister / Red Hat Product Security
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.