Vulnerabilities > CVE-2012-2141 - Denial of Service vulnerability in Net-Snmp 5.7.1
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
SINGLE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Nessus
NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2013-0124.NASL description Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. These packages provide various libraries and tools for the Simple Network Management Protocol (SNMP). An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 63569 published 2013-01-17 reporter This script is Copyright (C) 2013-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/63569 title CentOS 5 : net-snmp (CESA-2013:0124) NASL family SuSE Local Security Checks NASL id OPENSUSE-2012-299.NASL description SNMP GET request involving on a non-existent extension table entry could crash snmpd last seen 2020-06-05 modified 2014-06-13 plugin id 74638 published 2014-06-13 reporter This script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74638 title openSUSE Security Update : net-snmp (openSUSE-SU-2012:0659-1) NASL family Scientific Linux Local Security Checks NASL id SL_20120620_NET_SNMP_ON_SL6_X.NASL description The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-03-18 modified 2012-08-01 plugin id 61342 published 2012-08-01 reporter This script is Copyright (C) 2012-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/61342 title Scientific Linux Security Update : net-snmp on SL6.x i386/x86_64 (20120620) NASL family SuSE Local Security Checks NASL id SUSE_11_LIBSNMP15-120709.NASL description This update to net-snmp resolves the following issues : - Specially crafted SNMP GET requests could cause a denial of service (application crash) via a heap-based out-out-bounds read flaw which could be exploited remotely. (CVE-2012-2141) - The snmpd agent should read shared memory information from /proc/meminfo when running on Linux Kernel 2.6 or newer. (bnc#762887) - The snmpd agent could crash when an AgentX sub-agent disconnects in the middle of a request. (bnc#670789) - After rotating the net-snmp log file, use last seen 2020-06-05 modified 2013-01-25 plugin id 64194 published 2013-01-25 reporter This script is Copyright (C) 2013-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/64194 title SuSE 11.1 Security Update : net-snmp (SAT Patch Number 6517) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2013-0124.NASL description From Red Hat Security Advisory 2013:0124 : Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. These packages provide various libraries and tools for the Simple Network Management Protocol (SNMP). An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 68695 published 2013-07-12 reporter This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/68695 title Oracle Linux 5 : net-snmp (ELSA-2013-0124) NASL family Mandriva Local Security Checks NASL id MANDRIVA_MDVSA-2013-049.NASL description A vulnerability has been discovered and corrected in net-snmp : An array index error, leading to out-of heap-based buffer read flaw was found in the way net-snmp agent performed entries lookup in the extension table. When certain MIB subtree was handled by the extend directive, a remote attacker having read privilege to the subtree could use this flaw to cause a denial of service (snmpd crash) via SNMP GET request involving a non-existent extension table entry (CVE-2012-2141). The updated packages have been patched to correct this issue. last seen 2020-06-01 modified 2020-06-02 plugin id 66063 published 2013-04-20 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/66063 title Mandriva Linux Security Advisory : net-snmp (MDVSA-2013:049) NASL family Fedora Local Security Checks NASL id FEDORA_2012-16659.NASL description This update fixes : - Array index error, leading to out-of heap-based buffer read (CVE-2012-2141) - Size values in hrStorageTable and hrFSTable. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-03-17 modified 2012-10-31 plugin id 62766 published 2012-10-31 reporter This script is Copyright (C) 2012-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/62766 title Fedora 16 : net-snmp-5.7.1-3.fc16 (2012-16659) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2012-0876.NASL description Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 59592 published 2012-06-20 reporter This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/59592 title RHEL 6 : net-snmp (RHSA-2012:0876) NASL family SuSE Local Security Checks NASL id SUSE_NET-SNMP-8153.NASL description This update to net-snmp resolves the following issues : - Specially crafted SNMP GET requests could cause a denial of service (application crash) via a heap-based out-out-bounds read flaw which could be exploited remotely. (CVE-2012-2141) - After rotating the net-snmp log file, use last seen 2020-06-05 modified 2012-07-19 plugin id 60060 published 2012-07-19 reporter This script is Copyright (C) 2012-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/60060 title SuSE 10 Security Update : net-snmp (ZYPP Patch Number 8153) NASL family Fedora Local Security Checks NASL id FEDORA_2012-16662.NASL description This update fixes : - Array index error, leading to out-of heap-based buffer read (CVE-2012-2141) - Size values in hrStorageTable and hrFSTable. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-03-17 modified 2012-10-31 plugin id 62767 published 2012-10-31 reporter This script is Copyright (C) 2012-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/62767 title Fedora 17 : net-snmp-5.7.1-5.fc17 (2012-16662) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2013-0124.NASL description Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. These packages provide various libraries and tools for the Simple Network Management Protocol (SNMP). An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 63407 published 2013-01-08 reporter This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/63407 title RHEL 5 : net-snmp (RHSA-2013:0124) NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-1450-1.NASL description It was discovered that Net-SNMP incorrectly performed entry lookups in the extension table. A remote attacker could send a specially crafted request and cause the SNMP server to crash, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 59254 published 2012-05-24 reporter Ubuntu Security Notice (C) 2012-2019 Canonical, Inc. / NASL script (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/59254 title Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : net-snmp vulnerability (USN-1450-1) NASL family Solaris Local Security Checks NASL id SOLARIS11_NET-SNMP_20141216.NASL description The remote Solaris system is missing necessary patches to address security updates : - The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl. (CVE-2014-2285) - snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message. (CVE-2014-3565) last seen 2020-06-01 modified 2020-06-02 plugin id 80708 published 2015-01-19 reporter This script is Copyright (C) 2015-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/80708 title Oracle Solaris Third-Party Patch Update : net-snmp (cve_2012_2141_denial_of) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2012-0876.NASL description From Red Hat Security Advisory 2012:0876 : Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 68556 published 2013-07-12 reporter This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/68556 title Oracle Linux 6 : net-snmp (ELSA-2012-0876) NASL family Misc. NASL id CITRIX_NETSCALER_ADC_MULTIPLE.NASL description The remote Citrix NetScaler version is affected by multiple vulnerabilities : - A denial of service vulnerability in the VM Virtual Machine Daemon. Please note that this particular vulnerability does not apply to Citrix NetScaler 10.1. (CVE-2013-6938) - A denial of service vulnerability in the Application Delivery Controller RADIUS authentication. (CVE-2013-6939) - An authenticated denial of service in the SNMP daemon. (CVE-2012-2142) - An unspecified authentication disclosure in the Application Delivery Controller. (CVE-2013-6940) - An unspecified shell breakout in the Application Delivery Controller firmware. (CVE-2013-6941) - An unspecified LDAP username injection vulnerability in the Application Delivery Controller. (CVE-2013-6943) - A cross-site scripting vulnerability in the AAA TM vServer user interface. (CVE-2013-6944) last seen 2020-06-01 modified 2020-06-02 plugin id 73205 published 2014-03-26 reporter This script is Copyright (C) 2014-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/73205 title Citrix NetScaler Application Delivery Controller Multiple Vulnerabilities NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2012-0876.NASL description Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 59927 published 2012-07-11 reporter This script is Copyright (C) 2012-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/59927 title CentOS 6 : net-snmp (CESA-2012:0876) NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_5D85976A901111E1B5E0000C299B62E1.NASL description The Red Hat Security Response Team reports : An array index error, leading to out-of heap-based buffer read flaw was found in the way the net-snmp agent performed lookups in the extension table. When certain MIB subtrees were handled by the extend directive, a remote attacker (having read privileges to the subntree) could use this flaw to cause a denial of service condition via an SNMP GET request involving a non-existent extension table entry. last seen 2020-06-01 modified 2020-06-02 plugin id 58889 published 2012-04-27 reporter This script is Copyright (C) 2012-2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/58889 title FreeBSD : net-snmp -- Remote DoS (5d85976a-9011-11e1-b5e0-000c299b62e1) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201409-02.NASL description The remote host is affected by the vulnerability described in GLSA-201409-02 (Net-SNMP: Denial of Service) Multiple vulnerabilities have been discovered in Net-SNMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could create a Denial of Service condition. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 77471 published 2014-09-02 reporter This script is Copyright (C) 2014-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/77471 title GLSA-201409-02 : Net-SNMP: Denial of Service NASL family F5 Networks Local Security Checks NASL id F5_BIGIP_SOL15883.NASL description Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table. (CVE-2012-2141) last seen 2020-06-01 modified 2020-06-02 plugin id 79605 published 2014-11-28 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/79605 title F5 Networks BIG-IP : Net-SNMP vulnerability (K15883) NASL family Mandriva Local Security Checks NASL id MANDRIVA_MDVSA-2012-099.NASL description A vulnerability has been discovered and corrected in net-snmp : An array index error, leading to out-of heap-based buffer read flaw was found in the way net-snmp agent performed entries lookup in the extension table. When certain MIB subtree was handled by the extend directive, a remote attacker having read privilege to the subtree could use this flaw to cause a denial of service (snmpd crash) via SNMP GET request involving a non-existent extension table entry (CVE-2012-2141). The updated packages have been patched to correct this issue. last seen 2020-06-01 modified 2020-06-02 plugin id 59653 published 2012-06-22 reporter This script is Copyright (C) 2012-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/59653 title Mandriva Linux Security Advisory : net-snmp (MDVSA-2012:099) NASL family Scientific Linux Local Security Checks NASL id SL_20130108_NET_SNMP_ON_SL5_X.NASL description An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-03-18 modified 2013-01-17 plugin id 63600 published 2013-01-17 reporter This script is Copyright (C) 2013-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/63600 title Scientific Linux Security Update : net-snmp on SL5.x i386/x86_64 (20130108) NASL family Amazon Linux Local Security Checks NASL id ALA_ALAS-2012-97.NASL description An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the last seen 2020-06-01 modified 2020-06-02 plugin id 69704 published 2013-09-04 reporter This script is Copyright (C) 2013-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/69704 title Amazon Linux AMI : net-snmp (ALAS-2012-97)
Redhat
| advisories |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| rpms |
|
References
- http://rhn.redhat.com/errata/RHSA-2013-0124.html
- http://secunia.com/advisories/48938
- http://secunia.com/advisories/59974
- http://support.citrix.com/article/CTX139049
- http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml
- http://www.openwall.com/lists/oss-security/2012/04/26/2
- http://www.openwall.com/lists/oss-security/2012/04/26/3
- http://www.securityfocus.com/bid/53255
- http://www.securityfocus.com/bid/53258
- http://www.securitytracker.com/id?1026984
- https://bugzilla.redhat.com/show_bug.cgi?id=815813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75169