kb.juniper.netConfirmation
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 CVE-2012-6151
Net-SNMP - SNMPD AgentX Subagent Timeout Denial of Service
Record summary
CVE-2012-6151 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBNet-SNMP - SNMPD AgentX Subagent Timeout Denial of ServiceExploitDB exploitby Ken FarnenNot analyzed1 file
References
Showing 12 of 16APPLE-SA-2015-10-21-4Vendor advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html [oss-security] 20131202 NMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-outmailing list
http://seclists.org/oss-sec/2013/q4/398 [oss-security] 20131202 Re: SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-outmailing list
http://seclists.org/oss-sec/2013/q4/415 55804Third-party advisory
http://secunia.com/advisories/55804 57870Third-party advisory
http://secunia.com/advisories/57870 59974Third-party advisory
http://secunia.com/advisories/59974 sourceforge.net
http://sourceforge.net/p/net-snmp/bugs/2411 GLSA-201409-02Vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml 64048vdb entry
http://www.securityfocus.com/bid/64048 USN-2166-1Vendor advisory
http://www.ubuntu.com/usn/USN-2166-1 bugzilla.redhat.comConfirmation
https://bugzilla.redhat.com/show_bug.cgi?id=1038007