Test Kennung:	1.3.6.1.4.1.25623.1.0.882249
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for net-snmp CESA-2015:1636 centos7
Zusammenfassung:	Check the version of net-snmp
Beschreibung:	Summary: Check the version of net-snmp Vulnerability Insight: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. It was discovered that the snmp_pdu_parse() function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user running snmpd. (CVE-2015-5621) Red Hat would like to thank Qinghao Tang of QIHU 360 company, China for reporting this issue. All net-snmp users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Affected Software/OS: net-snmp on CentOS 7 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5621 BugTraq ID: 76380 http://www.securityfocus.com/bid/76380 Debian Security Information: DSA-4154 (Google Search) https://www.debian.org/security/2018/dsa-4154 https://www.exploit-db.com/exploits/45547/ http://www.openwall.com/lists/oss-security/2015/04/13/1 http://www.openwall.com/lists/oss-security/2015/04/16/15 http://www.openwall.com/lists/oss-security/2015/07/31/1 RedHat Security Advisories: RHSA-2015:1636 http://rhn.redhat.com/errata/RHSA-2015-1636.html http://www.securitytracker.com/id/1033304 SuSE Security Announcement: openSUSE-SU-2015:1502 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html http://www.ubuntu.com/usn/USN-2711-1
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.