[ glsa 201507-17 ] snmp

[GLSA]

Gentoo Linux Security Advisory

Title: SNMP: Denial of Service (GLSA 201507-17)
Severity: normal
Exploitable: remote
Date: July 10, 2015
Bug(s): #522062
ID: 201507-17

Synopsis

A vulnerability in SNMP could lead to a Denial of Service
condition.


Background

SNMP is a widely used protocol for monitoring the health and welfare of
network equipment.


Affected Packages

Package: net-analyzer/net-snmp
Vulnerable: < 5.7.3_pre5-r1
Unaffected: >= 5.7.3_pre5-r1
Architectures: All supported architectures


Description

A specially crafted trap message triggers a conversion to an erroneous
variable type when the -OQ option is used.


Impact

A remote attacker could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All SNMP users should upgrade to the latest version: