CVE-2012-6151

Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
http://seclists.org/oss-sec/2013/q4/398
http://seclists.org/oss-sec/2013/q4/415
http://secunia.com/advisories/55804
http://secunia.com/advisories/57870
http://secunia.com/advisories/59974
http://sourceforge.net/p/net-snmp/bugs/2411/	Exploit
http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml
http://www.securityfocus.com/bid/64048	Exploit
http://www.ubuntu.com/usn/USN-2166-1
https://bugzilla.redhat.com/show_bug.cgi?id=1038007
https://exchange.xforce.ibmcloud.com/vulnerabilities/89485
https://rhn.redhat.com/errata/RHSA-2014-0322.html
https://support.apple.com/HT205375
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
http://seclists.org/oss-sec/2013/q4/398
http://seclists.org/oss-sec/2013/q4/415
http://secunia.com/advisories/55804
http://secunia.com/advisories/57870
http://secunia.com/advisories/59974
http://sourceforge.net/p/net-snmp/bugs/2411/	Exploit
http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml
http://www.securityfocus.com/bid/64048	Exploit
http://www.ubuntu.com/usn/USN-2166-1
https://bugzilla.redhat.com/show_bug.cgi?id=1038007
https://exchange.xforce.ibmcloud.com/vulnerabilities/89485
https://rhn.redhat.com/errata/RHSA-2014-0322.html
https://support.apple.com/HT205375

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:mac_os_x:10.11.0:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:13.10:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:net-snmp:net-snmp::::::::
	cpe:2.3:a:net-snmp:net-snmp:5.0:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.1:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.2:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.3:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.4:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.5:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.6:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.7:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.8:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.0.9:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.1:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.1.2:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.2:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.3:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.3.0.1:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.4:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.5:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.6:::::::*
	cpe:2.3:a:net-snmp:net-snmp:5.7:::::::*

History

21 Nov 2024, 01:45

Information

Published : 2013-12-13 18:55

Updated : 2025-04-11 00:51

NVD link : CVE-2012-6151

Mitre link : CVE-2012-6151

CVE.ORG link : CVE-2012-6151

JSON object : View

Products Affected

net-snmp

net-snmp

apple

mac_os_x

canonical

ubuntu_linux

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2012-6151", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-12-13T18:55:04.693", "references": [{"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "source": "secalert@redhat.com"}, {"url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q4/398", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q4/415", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/55804", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/57870", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/59974", "source": "secalert@redhat.com"}, {"url": "http://sourceforge.net/p/net-snmp/bugs/2411/", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/64048", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2166-1", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1038007", "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89485", "source": "secalert@redhat.com"}, {"url": "https://rhn.redhat.com/errata/RHSA-2014-0322.html", "source": "secalert@redhat.com"}, {"url": "https://support.apple.com/HT205375", "source": "secalert@redhat.com"}, {"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2013/q4/398", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2013/q4/415", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/55804", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/57870", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/59974", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/p/net-snmp/bugs/2411/", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/64048", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/USN-2166-1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1038007", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89485", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://rhn.redhat.com/errata/RHSA-2014-0322.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/HT205375", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout."}, {"lang": "es", "value": "Net-SNMP 5.7.1 y anteriores, cuando AgentX est\u00e1 registrando para manejar una MIB y tramitaci\u00f3n de solicitudes de GETNEXT, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda o bucle infinito, consumo de CPU, y bloqueo) causando timeout en el subagente AgentX"}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDDDDC59-E784-4C8B-BDAD-55D8322138EC"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F61F047-129C-41A6-8A27-FFCBB8563E91"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E2FA9EC-6B8B-408E-BBF5-286EE423626B", "versionEndIncluding": "5.7.1"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87B4FDFF-9E09-4AB9-9196-6A01903473B6"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21E8FC05-D498-4D5D-B5A3-3F16749B7491"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BD964F4-9196-4641-A854-09DA86BCC890"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44A07BEF-C759-459E-A144-D37C1A55A9C8"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA0FD6CE-8179-4D48-9690-C130C0402CD6"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B97B7D0D-68CC-463D-A14B-3651D8DD4C73"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFCF39FC-D220-4F4A-8CBF-B993C65671FB"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B5512FA-8B74-4585-ADEF-F710C0DF83A0"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51AAC2EA-8AA7-4303-BD64-74CFC7938D04"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C872A9B0-0B3C-47B2-82F5-344BEBA221CD"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6CA1700-07A8-4DC3-8AB3-A30DBD7C8F9D"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A88517EE-17E2-4128-8355-FAAC815718CB"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E2BAAA8-313D-41F2-A98D-3557331E35B7"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "331C82ED-2FC8-44D0-B9CC-C1F8E693F3EC"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA42449F-A7E7-415C-8EC7-DB7B971AC603"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "950BC4AA-60A3-4512-A452-F205FF843C29"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABF6D757-93C1-4B08-B863-1183C9BD92AC"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50F4D055-EC8F-4F88-BE40-2EEDD41F50A9"}, {"criteria": "cpe:2.3:a:net-snmp:net-snmp:5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D7025F3-9106-4F62-91AA-4DA23417B999"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}

4.3 /10