MDVSA-2012:099 -- Mandriva net-snmpID: oval:org.secpod.oval:def:302917 | Date: (C)2012-08-30 (M)2023-12-07 |
Class: PATCH | Family: unix |
A vulnerability has been discovered and corrected in net-snmp: An array index error, leading to out-of heap-based buffer read flaw was found in the way net-snmp agent performed entries lookup in the extension table. When certain MIB subtree was handled by the extend directive, a remote attacker having read privilege to the subtree could use this flaw to cause a denial of service via SNMP GET request involving a non-existent extension table entry . The updated packages have been patched to correct this issue.
Platform: |
Mandriva Linux 2011.0 |
Mandriva Linux 2010.1 |