Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 01 Sep 2014 10:53:37 +1000
From: Murray McAllister <>
Subject: CVE-2014-3565, net-snmp: snmptrapd crash

Good morning,

CVE-2014-3565 was assigned to the following:

A remote denial-of-service flaw was found in the way snmptrapd handled
certain SNMP traps when started with the "-OQ" option. If an attacker
sent an SNMP trap containing a variable with a NULL type where an
integer variable type was expected, it would cause snmptrapd to crash.

Upstream do not consider it a serious issue as very few people
use the "-OQ" option. It should be fixed in a new release due soon.

Murray McAllister / Red Hat Product Security

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.