ID CVE-2012-6151
Summary Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.
References
Vulnerable Configurations
  • Canonical Ubuntu Linux 13.10
    cpe:2.3:o:canonical:ubuntu_linux:13.10
  • Canonical Ubuntu Linux 12.10
    cpe:2.3:o:canonical:ubuntu_linux:12.10
  • Canonical Ubuntu Linux 12.04 LTS
    cpe:2.3:o:canonical:ubuntu_linux:12.04:-:-:-:lts
  • Canonical Ubuntu Linux 10.04 LTS
    cpe:2.3:o:canonical:ubuntu_linux:10.04:-:-:-:lts
  • Apple Mac OS X 10.11.0
    cpe:2.3:o:apple:mac_os_x:10.11.0
  • Net-SNMP Net-SNMP 5.7.1
    cpe:2.3:a:net-snmp:net-snmp:5.7.1
  • Net-SNMP Net-SNMP 5.7
    cpe:2.3:a:net-snmp:net-snmp:5.7
  • Net-SNMP Net-SNMP 5.6
    cpe:2.3:a:net-snmp:net-snmp:5.6
  • Net-SNMP Net-SNMP 5.5
    cpe:2.3:a:net-snmp:net-snmp:5.5
  • Net-SNMP Net-SNMP 5.4
    cpe:2.3:a:net-snmp:net-snmp:5.4
  • Net-SNMP Net-SNMP 5.3.0.1
    cpe:2.3:a:net-snmp:net-snmp:5.3.0.1
  • Net-SNMP Net-SNMP 5.3
    cpe:2.3:a:net-snmp:net-snmp:5.3
  • Net-SNMP Net-SNMP 5.2
    cpe:2.3:a:net-snmp:net-snmp:5.2
  • Net-SNMP Net-SNMP 5.1.2
    cpe:2.3:a:net-snmp:net-snmp:5.1.2
  • Net-SNMP Net-SNMP 5.1
    cpe:2.3:a:net-snmp:net-snmp:5.1
  • Net-SNMP Net-SNMP 5.0.9
    cpe:2.3:a:net-snmp:net-snmp:5.0.9
  • Net-SNMP Net-SNMP 5.0.8
    cpe:2.3:a:net-snmp:net-snmp:5.0.8
  • Net-SNMP Net-SNMP 5.0.7
    cpe:2.3:a:net-snmp:net-snmp:5.0.7
  • Net-SNMP Net-SNMP 5.0.6
    cpe:2.3:a:net-snmp:net-snmp:5.0.6
  • Net-SNMP Net-SNMP 5.0.5
    cpe:2.3:a:net-snmp:net-snmp:5.0.5
  • Net-SNMP Net-SNMP 5.0.4
    cpe:2.3:a:net-snmp:net-snmp:5.0.4
  • Net-SNMP Net-SNMP 5.0.3
    cpe:2.3:a:net-snmp:net-snmp:5.0.3
  • Net-SNMP Net-SNMP 5.0.2
    cpe:2.3:a:net-snmp:net-snmp:5.0.2
  • Net-SNMP Net-SNMP 5.0.1
    cpe:2.3:a:net-snmp:net-snmp:5.0.1
  • Net-SNMP Net-SNMP 5.0
    cpe:2.3:a:net-snmp:net-snmp:5.0
CVSS
Base: 4.3 (as of 10-11-2015 - 11:06)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
exploit-db via4
description Net-SNMP SNMPD AgentX Subagent Timeout Denial of Service Vulnerability. CVE-2012-6151. Dos exploit for linux platform
id EDB-ID:38854
last seen 2016-02-04
modified 2012-09-05
published 2012-09-05
reporter Ken Farnen
source https://www.exploit-db.com/download/38854/
title Net-SNMP SNMPD AgentX Subagent Timeout Denial of Service Vulnerability
nessus via4
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-2166-1.NASL
    description Ken Farnen discovered that Net-SNMP incorrectly handled AgentX timeouts. A remote attacker could use this issue to cause the server to crash or to hang, resulting in a denial of service. (CVE-2012-6151) It was discovered that the Net-SNMP ICMP-MIB incorrectly validated input. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 13.10. (CVE-2014-2284) Viliam Pucik discovered that the Net-SNMP perl trap handler incorrectly handled NULL arguments. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. (CVE-2014-2285) It was discovered that Net-SNMP incorrectly handled AgentX multi-object requests. A remote attacker could use this issue to cause the server to hang, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 12.10. (CVE-2014-2310). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-01-02
    plugin id 73513
    published 2014-04-15
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73513
    title Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : net-snmp vulnerabilities (USN-2166-1)
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201409-02.NASL
    description The remote host is affected by the vulnerability described in GLSA-201409-02 (Net-SNMP: Denial of Service) Multiple vulnerabilities have been discovered in Net-SNMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could create a Denial of Service condition. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-12
    plugin id 77471
    published 2014-09-02
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=77471
    title GLSA-201409-02 : Net-SNMP: Denial of Service
  • NASL family MacOS X Local Security Checks
    NASL id MACOSX_10_11_1.NASL
    description The remote host is running a version of Mac OS X that is 10.9.5 or later but prior to 10.11.1 It is, therefore, affected by multiple vulnerabilities in the following components : - Accelerate Framework (CVE-2015-5940) - apache_mod_php (CVE-2015-0235, CVE-2015-0273, CVE-2015-6834, CVE-2015-6835, CVE-2015-6836, CVE-2015-6837, CVE-2015-6838) - ATS (CVE-2015-6985) - Audio (CVE-2015-5933, CVE-2015-5934, CVE-2015-7003) - Bom (CVE-2015-7006) - CFNetwork (CVE-2015-7023) - configd (CVE-2015-7015) - CoreGraphics (CVE-2015-5925, CVE-2015-5926) - CoreText (CVE-2015-5944, CVE-2015-6975, CVE-2015-6992, CVE-2015-7017) - Directory Utility (CVE-2015-6980) - Disk Images (CVE-2015-6995) - EFI (CVE-2015-7035) - File Bookmark (CVE-2015-6987) - FontParser (CVE-2015-5927, CVE-2015-5942, CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, CVE-2015-7018) - Grand Central Dispatch (CVE-2015-6989) - Graphics Drivers (CVE-2015-7019, CVE-2015-7020, CVE-2015-7021) - ImageIO (CVE-2015-5935, CVE-2015-5936, CVE-2015-5937, CVE-2015-5938, CVE-2015-5939) - IOAcceleratorFamily (CVE-2015-6996) - IOHIDFamily (CVE-2015-6974) - Kernel (CVE-2015-5932, CVE-2015-6988, CVE-2015-6994) - libarchive (CVE-2015-6984) - MCX Application Restrictions (CVE-2015-7016) - Net-SNMP (CVE-2014-3565, CVE-2012-6151) - OpenGL (CVE-2015-5924) - OpenSSH (CVE-2015-6563) - Sandbox (CVE-2015-5945) - Script Editor (CVE-2015-7007) - Security (CVE-2015-6983, CVE-2015-7024) - SecurityAgent (CVE-2015-5943) Note that successful exploitation of the most serious issues can result in arbitrary code execution.
    last seen 2019-02-21
    modified 2018-07-14
    plugin id 86654
    published 2015-10-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=86654
    title Mac OS X < 10.11.1 Multiple Vulnerabilities
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2014-0322.NASL
    description Updated net-snmp packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. A denial of service flaw was found in the way snmpd, the Net-SNMP daemon, handled subagent timeouts. A remote attacker able to trigger a subagent timeout could use this flaw to cause snmpd to loop infinitely or crash. (CVE-2012-6151) A denial of service flaw was found in the way the snmptrapd service, which receives and logs SNMP trap messages, handled SNMP trap requests with an empty community string when the Perl handler (provided by the net-snmp-perl package) was enabled. A remote attacker could use this flaw to crash snmptrapd by sending a trap request with an empty community string. (CVE-2014-2285) All net-snmp users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the snmpd and snmptrapd services will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 73175
    published 2014-03-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73175
    title RHEL 5 : net-snmp (RHSA-2014:0322)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20140324_NET_SNMP_ON_SL5_X.NASL
    description A denial of service flaw was found in the way snmpd, the Net-SNMP daemon, handled subagent timeouts. A remote attacker able to trigger a subagent timeout could use this flaw to cause snmpd to loop infinitely or crash. (CVE-2012-6151) A denial of service flaw was found in the way the snmptrapd service, which receives and logs SNMP trap messages, handled SNMP trap requests with an empty community string when the Perl handler (provided by the net-snmp- perl package) was enabled. A remote attacker could use this flaw to crash snmptrapd by sending a trap request with an empty community string. (CVE-2014-2285) After installing this update, the snmpd and snmptrapd services will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-28
    plugin id 73176
    published 2014-03-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73176
    title Scientific Linux Security Update : net-snmp on SL5.x i386/x86_64
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2013-22949.NASL
    description This update fixes CVE-2012-6151 : - snmpd crashes/hangs when AgentX subagent times-out Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 71853
    published 2014-01-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=71853
    title Fedora 18 : net-snmp-5.7.2-7.fc18 (2013-22949)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2013-22919.NASL
    description This update fixes CVE-2012-6151 : - snmpd crashes/hangs when AgentX subagent times-out Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 71852
    published 2014-01-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=71852
    title Fedora 19 : net-snmp-5.7.2-13.fc19 (2013-22919)
  • NASL family Solaris Local Security Checks
    NASL id SOLARIS11_NET-SNMP_20140915.NASL
    description The remote Solaris system is missing necessary patches to address security updates : - Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout. (CVE-2012-6151) - The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151. (CVE-2014-2310)
    last seen 2019-02-21
    modified 2018-11-15
    plugin id 80706
    published 2015-01-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=80706
    title Oracle Solaris Third-Party Patch Update : net-snmp (multiple_vulnerabilities_in_net_snmp)
  • NASL family Solaris Local Security Checks
    NASL id SOLARIS11_NET-SNMP_20141014.NASL
    description The remote Solaris system is missing necessary patches to address security updates : - Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout. (CVE-2012-6151)
    last seen 2019-02-21
    modified 2018-11-15
    plugin id 80707
    published 2015-01-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=80707
    title Oracle Solaris Third-Party Patch Update : net-snmp (cve_2012_6151_resource_management)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2013-22809.NASL
    description This update fixes CVE-2012-6151 : - snmpd crashes/hangs when AgentX subagent times-out Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 71851
    published 2014-01-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=71851
    title Fedora 20 : net-snmp-5.7.2-16.fc20 (2013-22809)
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2014-017.NASL
    description Updated net-snmp packages fix security vulnerability : Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout (CVE-2012-6151). This update also fixes two other minor issues: IPADDRESS size in python-netsnmp on 64-bit systems and adding btrfs support to hrFSTable.
    last seen 2019-02-21
    modified 2019-01-02
    plugin id 72101
    published 2014-01-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=72101
    title Mandriva Linux Security Advisory : net-snmp (MDVSA-2014:017)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2014-0322.NASL
    description Updated net-snmp packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. A denial of service flaw was found in the way snmpd, the Net-SNMP daemon, handled subagent timeouts. A remote attacker able to trigger a subagent timeout could use this flaw to cause snmpd to loop infinitely or crash. (CVE-2012-6151) A denial of service flaw was found in the way the snmptrapd service, which receives and logs SNMP trap messages, handled SNMP trap requests with an empty community string when the Perl handler (provided by the net-snmp-perl package) was enabled. A remote attacker could use this flaw to crash snmptrapd by sending a trap request with an empty community string. (CVE-2014-2285) All net-snmp users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the snmpd and snmptrapd services will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 73163
    published 2014-03-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73163
    title CentOS 5 : net-snmp (CESA-2014:0322)
  • NASL family Amazon Linux Local Security Checks
    NASL id ALA_ALAS-2014-316.NASL
    description A buffer overflow flaw was found in the way the decode_icmp_msg() function in the ICMP-MIB implementation processed Internet Control Message Protocol (ICMP) message statistics reported in the /proc/net/snmp file. A remote attacker could send a message for each ICMP message type, which could potentially cause the snmpd service to crash when processing the /proc/net/snmp file. (CVE-2014-2284)
    last seen 2019-02-21
    modified 2018-04-18
    plugin id 73235
    published 2014-03-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73235
    title Amazon Linux AMI : net-snmp (ALAS-2014-316)
  • NASL family F5 Networks Local Security Checks
    NASL id F5_BIGIP_SOL16476.NASL
    description Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout. (CVE-2012-6151)
    last seen 2019-02-21
    modified 2019-01-04
    plugin id 82932
    published 2015-04-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=82932
    title F5 Networks BIG-IP : NET-SNMP vulnerability (K16476)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2014-0322.NASL
    description From Red Hat Security Advisory 2014:0322 : Updated net-snmp packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. A denial of service flaw was found in the way snmpd, the Net-SNMP daemon, handled subagent timeouts. A remote attacker able to trigger a subagent timeout could use this flaw to cause snmpd to loop infinitely or crash. (CVE-2012-6151) A denial of service flaw was found in the way the snmptrapd service, which receives and logs SNMP trap messages, handled SNMP trap requests with an empty community string when the Perl handler (provided by the net-snmp-perl package) was enabled. A remote attacker could use this flaw to crash snmptrapd by sending a trap request with an empty community string. (CVE-2014-2285) All net-snmp users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the snmpd and snmptrapd services will be restarted automatically.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 73173
    published 2014-03-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73173
    title Oracle Linux 5 : net-snmp (ELSA-2014-0322)
redhat via4
advisories
  • bugzilla
    id 993579
    title net-snmpd crash on time out
    oval
    AND
    • OR
      • comment Red Hat Enterprise Linux 6 Client is installed
        oval oval:com.redhat.rhba:tst:20111656001
      • comment Red Hat Enterprise Linux 6 Server is installed
        oval oval:com.redhat.rhba:tst:20111656002
      • comment Red Hat Enterprise Linux 6 Workstation is installed
        oval oval:com.redhat.rhba:tst:20111656003
      • comment Red Hat Enterprise Linux 6 ComputeNode is installed
        oval oval:com.redhat.rhba:tst:20111656004
    • OR
      • AND
        • comment net-snmp is earlier than 1:5.5-44.el6_4.4
          oval oval:com.redhat.rhba:tst:20131150005
        • comment net-snmp is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20131150006
      • AND
        • comment net-snmp-devel is earlier than 1:5.5-44.el6_4.4
          oval oval:com.redhat.rhba:tst:20131150015
        • comment net-snmp-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20131150016
      • AND
        • comment net-snmp-libs is earlier than 1:5.5-44.el6_4.4
          oval oval:com.redhat.rhba:tst:20131150013
        • comment net-snmp-libs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20131150014
      • AND
        • comment net-snmp-perl is earlier than 1:5.5-44.el6_4.4
          oval oval:com.redhat.rhba:tst:20131150009
        • comment net-snmp-perl is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20131150010
      • AND
        • comment net-snmp-python is earlier than 1:5.5-44.el6_4.4
          oval oval:com.redhat.rhba:tst:20131150011
        • comment net-snmp-python is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20131150012
      • AND
        • comment net-snmp-utils is earlier than 1:5.5-44.el6_4.4
          oval oval:com.redhat.rhba:tst:20131150007
        • comment net-snmp-utils is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhba:tst:20131150008
    rhsa
    released 2013-08-12
    severity None
    title RHBA-2013:1150: net-snmp bug fix update (None)
  • rhsa
    id RHSA-2014:0322
rpms
  • net-snmp-1:5.5-44.el6_4.4
  • net-snmp-devel-1:5.5-44.el6_4.4
  • net-snmp-libs-1:5.5-44.el6_4.4
  • net-snmp-perl-1:5.5-44.el6_4.4
  • net-snmp-python-1:5.5-44.el6_4.4
  • net-snmp-utils-1:5.5-44.el6_4.4
  • net-snmp-1:5.3.2.2-22.el5_10.1
  • net-snmp-devel-1:5.3.2.2-22.el5_10.1
  • net-snmp-libs-1:5.3.2.2-22.el5_10.1
  • net-snmp-perl-1:5.3.2.2-22.el5_10.1
  • net-snmp-utils-1:5.3.2.2-22.el5_10.1
refmap via4
apple APPLE-SA-2015-10-21-4
bid 64048
confirm
gentoo GLSA-201409-02
misc http://sourceforge.net/p/net-snmp/bugs/2411/
mlist
  • [oss-security] 20131202 NMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out
  • [oss-security] 20131202 Re: SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out
secunia
  • 55804
  • 57870
  • 59974
ubuntu USN-2166-1
xf netsnmp-cve20126151-dos(89485)
Last major update 07-12-2016 - 22:02
Published 13-12-2013 - 13:55
Last modified 28-08-2017 - 21:32
Back to Top