The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA82973 advisory.

  - Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB     provides the ability to run arbitrary commands as root. (CVE-2020-15862)

  - The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind     variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers     to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
    (CVE-2015-5621)

  - The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using     TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote     attackers to bypass intended access restrictions and execute SNMP queries, related to source/destination     IP address confusion. (CVE-2008-6123)

  - Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.
    (CVE-2020-15861)

  - _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that     can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet,     resulting in Denial of Service. (CVE-2018-18065)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Solaris system is missing necessary patches to address security updates :

  - Net-SNMP 5.7.1 and earlier, when AgentX is registering     to handle a MIB and processing GETNEXT requests, allows     remote attackers to cause a denial of service (crash or     infinite loop, CPU consumption, and hang) by causing the     AgentX subagent to timeout. (CVE-2012-6151)

  - The AgentX subagent in Net-SNMP before 5.4.4 allows     remote attackers to cause a denial of service (hang) by     sending a multi-object request with an Object ID (OID)     containing more subids than previous requests, a     different vulnerability than CVE-2012-6151.
    (CVE-2014-2310)

Ken Farnen discovered that Net-SNMP incorrectly handled AgentX timeouts. A remote attacker could use this issue to cause the server to crash or to hang, resulting in a denial of service. (CVE-2012-6151)

It was discovered that the Net-SNMP ICMP-MIB incorrectly validated input. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 13.10. (CVE-2014-2284)

Viliam Pucik discovered that the Net-SNMP perl trap handler incorrectly handled NULL arguments. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service.
(CVE-2014-2285)

It was discovered that Net-SNMP incorrectly handled AgentX multi-object requests. A remote attacker could use this issue to cause the server to hang, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 12.10.
(CVE-2014-2310).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The net-snmp remote service received security and bugfixes :

  - A remote denial of service flaw in Linux implementation     of ICMP-MIB has been fixed. (CVE-2014-2284)

  - snmptrapd could have crashed when using a trap with     empty community string. This has been fixed.
    (CVE-2014-2285)

  - The AgentX subagent of net-snmp could have been stalled     when a manager sent a multi-object request with a     different number of subids. (CVE-2014-2310)

ID	Name	Product	Family	Severity
310756	Juniper Junos OS Multiple Vulnerabilities (JSA82973)	Nessus	Junos Local Security Checks	high
80706	Oracle Solaris Third-Party Patch Update : net-snmp (multiple_vulnerabilities_in_net_snmp)	Nessus	Solaris Local Security Checks	medium
73513	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : net-snmp vulnerabilities (USN-2166-1)	Nessus	Ubuntu Local Security Checks	medium
73511	SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9015)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2014-2310

info

Tenable Plugins

high

medium

medium

medium