Skip to content
Commit 9747141c authored by yzhu1's avatar yzhu1 Committed by Joe MacDonald
Browse files

net-snmp-5.7.2: fix CVE-2014-2285

The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs
in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions,
allows remote attackers to cause a denial of service (snmptrapd
crash) via an empty community string in an SNMP trap, which triggers
a NULL pointer dereference within the newSVpv function in Perl.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2285


Signed-off-by: default avataryzhu1 <yanjun.zhu@windriver.com>
Signed-off-by: default avatarRoy Li <rongqing.li@windriver.com>
Signed-off-by: default avatarJoe MacDonald <joe@deserted.net>
parent 7361149c
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment