NVD

Id
30734  
Name
CVE-2014-2285  
Description
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-04-27  
Modified Date
2016-12-07  
Seq
2014-2285  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161970 30734 CVE-2014-2285 [oss-security] 20140305 CVE request for two net-snmp remote DoS flaws  View
161971 30734 CVE-2014-2285 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
161972 30734 CVE-2014-2285 openSUSE-SU-2014:0398  View
161973 30734 CVE-2014-2285 openSUSE-SU-2014:0399  View
161974 30734 CVE-2014-2285 http://sourceforge.net/p/net-snmp/patches/1275/  View
161975 30734 CVE-2014-2285 GLSA-201409-02  View
161976 30734 CVE-2014-2285 http://www.nntp.perl.org/group/perl.perl5.porters/2006/09/msg116250.html  View
161977 30734 CVE-2014-2285 https://bugzilla.redhat.com/show_bug.cgi?id=1072044  View
161978 30734 CVE-2014-2285 https://bugzilla.redhat.com/show_bug.cgi?id=1072778  View
161979 30734 CVE-2014-2285 RHSA-2014:0322  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13415 JVNDB-2014-002290 Net-SNMP の perl/TrapReceiver/TrapReceiver.xs の perl_trapd_handler 関数におけるサービス運用妨害 (DoS) の脆弱性 Net-SNMP の perl/TrapReceiver/TrapReceiver.xs の perl_trapd_handler 関数には、特定の Perl バージョンを使用する場合、サービス運用妨害 (snmptrapd クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-2285 69572 CVE-2014-2285 30734 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002290.html 2014-03-03 2014-12-25 View