Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:1556-1

Опубликовано: 21 авг. 2015
Источник: suse-cvrf

Описание

Security update for net-snmp

The following issues have been fixed within this update:

  • fix btrfs output inside HOST-RESOURCES-MIB::hrStorageDescr. (bsc#909479)
  • fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bsc#940188, CVE-2015-5621)
  • add build requirement 'procps' to fix a net-snmp-config error (bsc#935863)
  • --disable-md5 to allow operation in FIPS mode and not use the old algorithm (bsc#935876 bsc#940084)
  • also stop snmptrapd on removal

Список пакетов

SUSE Linux Enterprise Desktop 12
libsnmp30-5.7.2.1-4.3.2
libsnmp30-32bit-5.7.2.1-4.3.2
net-snmp-5.7.2.1-4.3.2
perl-SNMP-5.7.2.1-4.3.2
snmp-mibs-5.7.2.1-4.3.2
SUSE Linux Enterprise Server 12
libsnmp30-5.7.2.1-4.3.2
libsnmp30-32bit-5.7.2.1-4.3.2
net-snmp-5.7.2.1-4.3.2
perl-SNMP-5.7.2.1-4.3.2
snmp-mibs-5.7.2.1-4.3.2
SUSE Linux Enterprise Server for SAP Applications 12
libsnmp30-5.7.2.1-4.3.2
libsnmp30-32bit-5.7.2.1-4.3.2
net-snmp-5.7.2.1-4.3.2
perl-SNMP-5.7.2.1-4.3.2
snmp-mibs-5.7.2.1-4.3.2
SUSE Linux Enterprise Software Development Kit 12
net-snmp-devel-5.7.2.1-4.3.2

Ссылки

Описание

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

Затронутые продукты
SUSE Linux Enterprise Desktop 12:libsnmp30-32bit-5.7.2.1-4.3.2
SUSE Linux Enterprise Desktop 12:libsnmp30-5.7.2.1-4.3.2
SUSE Linux Enterprise Desktop 12:net-snmp-5.7.2.1-4.3.2
SUSE Linux Enterprise Desktop 12:perl-SNMP-5.7.2.1-4.3.2
Ссылки