vulnerability note CVE-2009-1887

RHEL 3: denial of service of net-snmp

Synthesis of the vulnerability

An attacker can send a GETBULK request to the snmpd daemon patched for Red Hat Enterprise Linux version 3 in order to stop it.

Severity: 2/4. Creation date: 26/06/2009.

Impacted products

• Mandriva Corporate
• Mandriva Multi Network Firewall
• OpenSolaris
• Oracle Solaris
• Red Hat Enterprise Linux
• VMware ESX

Description of the vulnerability

A SNMP GETBULK query is used to obtain a group of variables at the same time. It contains the "non-repeaters" fields which indicates the starting offset. The net-snmp package of Red Hat Enterprise Linux version 3 has a specific patch. The netsnmp_create_subtree_cache() function of the net-snmp/agent/snmp_agent.c file does not correctly checks a limit condition, which generates a division by zero. This limit condition is reached when the GETBULK query indicates a "non-repeaters" equal to the number of requested variables. An attacker can therefore send a GETBULK request to the snmpd daemon patched for Red Hat Enterprise Linux version 3 in order to stop it. This specific RHEL 3 patch was then transmitted to other OpenSource systems.

Share this bulletin

Complete Vigil@nce bulletin

RHEL 3: denial of service of net-snmp

Characteristics

Title: RHEL 3: denial of service of net-snmp. Keywords: Enterprise GETBULK Hat Linux OpenSource RHEL Red SNMP denial net-snmp netsnmp_create_subtree_cache service snmp_agent. Identifiers: 262908, 506903, 6356589, 6839634, BID-35492, CVE-2009-1887, MDVSA-2009:156, RHSA-2009:1124-01, VIGILANCE-VUL-8824, VMSA-2010-0003, VMSA-2010-0003.1.

Information sources

Publications and announces Source example: Bug 506903 - CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests

Solutions for this vulnerability

Patch or workaround

Supplements

Attack Exploit 0day or proof of concept

Computer vulnerabilities tracking service

Vigil@nce provides a software vulnerability bulletin. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications. The Vigil@nce vulnerability database contains several thousand vulnerabilities.