CVE-2007-5846

Publication date 6 November 2007

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
net-snmp 7.10 gutsy
Fixed 5.3.1-6ubuntu2.1
7.04 feisty
Fixed 5.2.3-4ubuntu1.1
6.10 edgy
Fixed 5.2.2-5ubuntu1.1
6.06 LTS dapper
Fixed 5.2.1.2-4ubuntu2.2

Notes

jdstrand

bug report has debdiffs raised to medium as it is remote DoS

References

Related Ubuntu Security Notices (USN)

    • USN-564-1
    • Net-SNMP vulnerability
    • 9 January 2008

Other references