MDVSA-2012:099 -- Mandriva net-snmpID: oval:org.secpod.oval:def:1300083 | Date: (C)2013-01-01 (M)2023-12-07 |
Class: PATCH | Family: unix |
A vulnerability has been discovered and corrected in net-snmp: An array index error, leading to out-of heap-based buffer read flaw was found in the way net-snmp agent performed entries lookup in the extension table. When certain MIB subtree was handled by the extend directive, a remote attacker having read privilege to the subtree could use this flaw to cause a denial of service via SNMP GET request involving a non-existent extension table entry . The updated packages have been patched to correct this issue.
Platform: |
Mandriva Enterprise Server 5.2 |