Bug 99680 – net-analyzer/net-snmp 5.2.1.2 fixes a DoS vulnerability with stream sockets

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Frederic Mangeant 2005-07-20 07:38:00 UTC]

Notes: *5.2.1.2* Security: - Fixed a denial of service vulnerability when stream
sockets have been configured for use (E.G., TCP but not UDP).

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

[Comment 1 Sune Kloppenborg Jeppesen (RETIRED) 2005-07-20 09:05:57 UTC]

Netmon please provide an updated ebuild.  

[Comment 2 Daniel Black (RETIRED) 2005-07-20 14:50:52 UTC]

added 5.2.1.2 masked - I haven't fully tested it yet. it compiles ok and all 
the patching has been verified. Needs more runtime testing and compiling with 
various permutations of use flags. 

[Comment 3 Sune Kloppenborg Jeppesen (RETIRED) 2005-07-20 22:13:03 UTC]

Is it ready for arch testing or do you want to test further yourself? 

[Comment 4 Sune Kloppenborg Jeppesen (RETIRED) 2005-07-21 03:51:55 UTC]

Arches please test and mark stable. 

[Comment 5 Aaron Walker (RETIRED) 2005-07-21 04:08:07 UTC]

stable on sparc.

[Comment 6 René Nussbaumer (RETIRED) 2005-07-21 11:06:53 UTC]

Stable on hppa

[Comment 7 Markus Rothe (RETIRED) 2005-07-21 11:53:28 UTC]

stable on ppc64

[Comment 8 Joe Jezak (RETIRED) 2005-07-21 18:27:35 UTC]

Marked ppc stable.

[Comment 9 Herbie Hopkins (RETIRED) 2005-07-22 12:03:52 UTC]

Stable on amd64.

[Comment 10 Bryan Østergaard (RETIRED) 2005-07-23 13:10:22 UTC]

Stable on alpha + ia64.

[Comment 11 Sune Kloppenborg Jeppesen (RETIRED) 2005-07-23 15:45:53 UTC]

This one is ready for GLSA decision. I tend to vote NO. 

[Comment 12 Hardave Riar (RETIRED) 2005-07-23 19:58:51 UTC]

Stable on mips.

[Comment 13 Stefan Cornelius (RETIRED) 2005-07-24 03:23:13 UTC]

I agree on no.

[Comment 14 Frederic Mangeant 2005-07-24 12:11:40 UTC]

I agree with you, most people run Net-SNMP with UDP.

[Comment 15 Thierry Carrez (RETIRED) 2005-07-27 07:05:21 UTC]

Voting no too. Closing