[Pkg-net-snmp-devel] Bug#742817: net-snmp: CVE-2014-2284

[Salvatore Bonaccorso]

Package: net-snmp
Version: 5.7.2~dfsg-8.1
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for net-snmp.

CVE-2014-2284[0]:
| The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before
| 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not
| properly validate input, which allows remote attackers to cause a
| denial of service via unspecified vectors.

The upstream patch is available at [1].

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2284
    https://security-tracker.debian.org/tracker/CVE-2014-2284
[1] http://sourceforge.net/p/net-snmp/code/ci/a1fd64716f6794c55c34d77e618210238a73bfa1/
[2] http://sourceforge.net/p/net-snmp/mailman/message/32026655/

Regards,
Salvatore