Net-SNMP ICMP-MIB Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Net-SNMP net-snmp <5.7.2.1
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2014-2284
 
Net-SNMP is a free, open-source SNMP implementation, formerly called UCD-SNMP.
 
Net-snmp-perl 5.7.2.1 earlier versions have security vulnerabilities in the implementation of ICMP-MIB, which can cause a crash after successful exploitation. This vulnerability only affects the Linux platform.
 
<* Source: vendor

Link: http://secunia.com/advisories/57124/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Net-SNMP
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://sourceforge.net/projects/net-snmp/
Http://sourceforge.net/p/net-snmp/mailman/message/32026655/

Net-SNMP details: click here
Net-SNMP: click here

Install Net-SNMP in RPM mode in Linux

Use of Net-SNMPv3 in openSUSE 11.2

Net-SNMP mib2c Configuration

Install Net-SNMP in Ubuntu

Ubuntu installation Net-SNMP-5.5.1 method summary