CVE-2014-2284

Published: 24 March 2014

The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.

Status

Notes

5.4 is not affected

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2284
• http://www.openwall.com/lists/oss-security/2014/03/05/2
• http://sourceforge.net/p/net-snmp/mailman/message/32026655/
• https://ubuntu.com/security/notices/USN-2166-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=1070396