~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2014-2284

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
PublicDateAtUSN: 2014-03-24
2
 
Candidate: CVE-2014-2284
3
 
PublicDate: 2014-03-24
4
 
References:
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2284
6
 
 http://www.openwall.com/lists/oss-security/2014/03/05/2
7
 
 http://sourceforge.net/p/net-snmp/mailman/message/32026655/
8
 
 https://usn.ubuntu.com/usn/usn-2166-1
9
 
Description:
10
 
 The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1,
11
 
 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate
12
 
 input, which allows remote attackers to cause a denial of service via
13
 
 unspecified vectors.
14
 
Ubuntu-Description:
15
 
Notes:
16
 
 mdeslaur> 5.4 is not affected
17
 
Bugs:
18
 
 https://bugzilla.redhat.com/show_bug.cgi?id=1070396
19
 
Priority: medium
20
 
Discovered-by:
21
 
Assigned-to: mdeslaur
22
 
 
23
 
Patches_net-snmp:
24
 
 upstream: http://sourceforge.net/p/net-snmp/code/ci/a1fd64716f6794c55c34d77e618210238a73bfa1/
25
 
upstream_net-snmp: needed
26
 
lucid_net-snmp: not-affected (5.4.2.1~dfsg0ubuntu1-0ubuntu2.2)
27
 
precise_net-snmp: not-affected (5.4.3~dfsg-2.4ubuntu1.1)
28
 
quantal_net-snmp: not-affected (5.4.3~dfsg-2.5ubuntu1)
29
 
saucy_net-snmp: released (5.7.2~dfsg-8ubuntu1.1)
30
 
devel_net-snmp: released (5.7.2~dfsg-8.1ubuntu3)