Skip to content

Commit e2ffb58

Browse files
zhenggen-xulguohan
authored andcommitted
[security] Fixes for DSA-4314-1 net-snmp (#2152)
CVE-case: https://security-tracker.debian.org/tracker/CVE-2018-18065
1 parent a401ee7 commit e2ffb58

File tree

2 files changed

+37
-0
lines changed

2 files changed

+37
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
From 2170e345858738e65d3156a49d3186e4a9288821 Mon Sep 17 00:00:00 2001
2+
From: Zhenggen Xu <[email protected]>
3+
Date: Fri, 12 Oct 2018 17:13:54 -0700
4+
Subject: [PATCH] Subject: [PATCH] CHANGES: BUG: 2743: snmpd crashes when
5+
receiving a GetNext PDU with multiple Varbinds
6+
7+
skip out-of-range varbinds when calling next handler
8+
---
9+
agent/helpers/table.c | 4 ++++
10+
1 file changed, 4 insertions(+)
11+
12+
diff --git a/agent/helpers/table.c b/agent/helpers/table.c
13+
index 882e84c..b943d6e 100644
14+
--- a/agent/helpers/table.c
15+
+++ b/agent/helpers/table.c
16+
@@ -406,6 +406,8 @@ table_helper_handler(netsnmp_mib_handler *handler,
17+
if (reqinfo->mode == MODE_GET)
18+
table_helper_cleanup(reqinfo, request,
19+
SNMP_NOSUCHOBJECT);
20+
+ else
21+
+ request->processed = 1; /* skip if next handler called */
22+
continue;
23+
}
24+
25+
@@ -483,6 +485,8 @@ table_helper_handler(netsnmp_mib_handler *handler,
26+
#endif /* NETSNMP_NO_WRITE_SUPPORT */
27+
table_helper_cleanup(reqinfo, request,
28+
SNMP_NOSUCHOBJECT);
29+
+ else
30+
+ request->processed = 1; /* skip if next handler called */
31+
continue;
32+
}
33+
/*
34+
--
35+
2.18.0
36+

src/snmpd/patch-5.7.3+dfsg/series

+1
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,3 @@
11
0001-SNMP-Stop-spamming-logs-with-statfs-permission-denie.patch
22
0002-at.c-properly-check-return-status-from-realloc.-Than.patch
3+
0003-CHANGES-BUG-2743-snmpd-crashes-when-receiving-a-GetN.patch

0 commit comments

Comments
 (0)