The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151.

The remote Solaris system is missing necessary patches to address security updates :

  - Net-SNMP 5.7.1 and earlier, when AgentX is registering     to handle a MIB and processing GETNEXT requests, allows     remote attackers to cause a denial of service (crash or     infinite loop, CPU consumption, and hang) by causing the     AgentX subagent to timeout. (CVE-2012-6151)

  - The AgentX subagent in Net-SNMP before 5.4.4 allows     remote attackers to cause a denial of service (hang) by     sending a multi-object request with an Object ID (OID)     containing more subids than previous requests, a     different vulnerability than CVE-2012-6151.
    (CVE-2014-2310)

Ken Farnen discovered that Net-SNMP incorrectly handled AgentX timeouts. A remote attacker could use this issue to cause the server to crash or to hang, resulting in a denial of service. (CVE-2012-6151)

It was discovered that the Net-SNMP ICMP-MIB incorrectly validated input. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 13.10. (CVE-2014-2284)

Viliam Pucik discovered that the Net-SNMP perl trap handler incorrectly handled NULL arguments. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service.
(CVE-2014-2285)

It was discovered that Net-SNMP incorrectly handled AgentX multi-object requests. A remote attacker could use this issue to cause the server to hang, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 12.10.
(CVE-2014-2310).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The net-snmp remote service received security and bugfixes :

  - A remote denial of service flaw in Linux implementation     of ICMP-MIB has been fixed. (CVE-2014-2284)

  - snmptrapd could have crashed when using a trap with     empty community string. This has been fixed.
    (CVE-2014-2285)

  - The AgentX subagent of net-snmp could have been stalled     when a manager sent a multi-object request with a     different number of subids. (CVE-2014-2310)

ID	Name	Product	Family	Severity
80706	Oracle Solaris Third-Party Patch Update : net-snmp (multiple_vulnerabilities_in_net_snmp)	Nessus	Solaris Local Security Checks	medium
73513	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : net-snmp vulnerabilities (USN-2166-1)	Nessus	Ubuntu Local Security Checks	medium
73511	SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9015)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2014-2310

medium

Tenable Plugins

medium

medium

medium