diff options
| author |   Junling Zheng <zhengjunling@huawei.com> | 2015-05-04 03:22:26 +0000 |
|---|---|---|
| committer |   Joe MacDonald <joe_macdonald@mentor.com> | 2015-05-08 15:40:28 -0400 |
| commit | ff3c52f44da3cd8c2e350677c85d161b9819ddcc (patch) | |
| tree | 15dfe1c1af0d0424bc26d82b7f1e43264c3e16c6 /meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb | |
| parent | 2cb54ed8a103c56fcf42d4a363d175dbdc094489 (diff) | |
| download | meta-openembedded-contrib-ff3c52f44da3cd8c2e350677c85d161b9819ddcc.tar.gz | |
net-snmp: fix CVE-2014-2285
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in
Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows
remote attackers to cause a denial of service (snmptrapd crash) via an
empty community string in an SNMP trap, which triggers a NULL pointer
dereference within the newSVpv function in Perl.
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1072044
Signed-off-by: Junling Zheng <zhengjunling@huawei.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb')
| -rw-r--r-- | meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb index 1baf101d93..c9a692dd6d 100644 --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.7.2.1.bb @@ -19,6 +19,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.zip \ file://fix-libtool-finish.patch \ file://net-snmp-testing-add-the-output-format-for-ptest.patch \ file://run-ptest \ + file://0001-Fix-CVE-2014-2285.patch \ " SRC_URI[md5sum] = "a2c83518648b0f2a5d378625e45c0e18" |