CVE - CVE-2012-2141

CVE-ID
CVE-2012-2141	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1026984 URL:http://www.securitytracker.com/id?1026984 MISC:48938 URL:http://secunia.com/advisories/48938 MISC:53255 URL:http://www.securityfocus.com/bid/53255 MISC:53258 URL:http://www.securityfocus.com/bid/53258 MISC:59974 URL:http://secunia.com/advisories/59974 MISC:GLSA-201409-02 URL:http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml MISC:RHSA-2013:0124 URL:http://rhn.redhat.com/errata/RHSA-2013-0124.html MISC:[oss-security] 20120426 CVE Request -- net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash) URL:http://www.openwall.com/lists/oss-security/2012/04/26/2 MISC:[oss-security] 20120426 Re: CVE Request -- net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash) URL:http://www.openwall.com/lists/oss-security/2012/04/26/3 MISC:http://support.citrix.com/article/CTX139049 URL:http://support.citrix.com/article/CTX139049 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=815813 URL:https://bugzilla.redhat.com/show_bug.cgi?id=815813 MISC:netsnmp-snmpget-dos(75169) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/75169
Assigning CNA
Red Hat, Inc.
Date Record Created
20120404	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120404)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)