Skip to content
OpenAdvisories
Medium ELSA-2015-1636 1 CVE

Moderate: net-snmp security update (Oracle Linux 7)

Published Aug 17, 2015 · Updated Aug 17, 2015

Ecosystem: Oracle Linux

Summary

[1:5.5-54.0.1.el6_7.1]
- Add Oracle ACFS to hrStorage (John Haxby) [orabug 18510373]

[1:5.5-54.el6_7.1]
- Fixed parsing of invalid variables in incoming packets (#1248410)

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 net-snmp 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-agent-libs 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-devel 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-gui 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-libs 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-perl 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-python 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-sysvinit 1:5.7.2-20.el7_1.1
Oracle Linux · 7 net-snmp-utils 1:5.7.2-20.el7_1.1

Vulnerabilities 1

  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…

    net-snmp net-snmp Debian Ubuntu