CVE-2009-1887

Publication date 26 June 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.

Read the notes from the security team

Status

Package Ubuntu Release Status
net-snmp 9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper
Not affected

Notes

jdstrand

only affected RedHat 3 which backported a patch to 5.0.9 which did not yet have another patch applied. Dapper and higher are not affected