diff options
author | Junling Zheng <zhengjunling@huawei.com> | 2015-05-04 03:22:26 +0000 |
---|---|---|
committer | Joe MacDonald <joe_macdonald@mentor.com> | 2015-05-08 15:40:28 -0400 |
commit | ff3c52f44da3cd8c2e350677c85d161b9819ddcc (patch) | |
tree | 15dfe1c1af0d0424bc26d82b7f1e43264c3e16c6 /meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb | |
parent | 2cb54ed8a103c56fcf42d4a363d175dbdc094489 (diff) | |
download | meta-openembedded-ff3c52f44da3cd8c2e350677c85d161b9819ddcc.tar.gz |
net-snmp: fix CVE-2014-2285
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in
Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows
remote attackers to cause a denial of service (snmptrapd crash) via an
empty community string in an SNMP trap, which triggers a NULL pointer
dereference within the newSVpv function in Perl.
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1072044
Signed-off-by: Junling Zheng <zhengjunling@huawei.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb')
-rw-r--r-- | meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb index 1baf101d9..c9a692dd6 100644 --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb | |||
@@ -19,6 +19,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.zip \ | |||
19 | file://fix-libtool-finish.patch \ | 19 | file://fix-libtool-finish.patch \ |
20 | file://net-snmp-testing-add-the-output-format-for-ptest.patch \ | 20 | file://net-snmp-testing-add-the-output-format-for-ptest.patch \ |
21 | file://run-ptest \ | 21 | file://run-ptest \ |
22 | file://0001-Fix-CVE-2014-2285.patch \ | ||
22 | " | 23 | " |
23 | 24 | ||
24 | SRC_URI[md5sum] = "a2c83518648b0f2a5d378625e45c0e18" | 25 | SRC_URI[md5sum] = "a2c83518648b0f2a5d378625e45c0e18" |