CVE-2014-2310

published 2014-04-17

CVE-2014-2310: The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID…

Priority P4 23 medium 5 CVSS 2.0

AV N AC L Au N C N I N A P

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	net-snmp	< net-snmp 5.7.2~dfsg-3 (bookworm)	net-snmp 5.7.2~dfsg-3 (bookworm)
net-snmp	net-snmp	<= 5.4	—
net-snmp	net-snmp	>= 0 < 5.7.2~dfsg-3	5.7.2~dfsg-3
net-snmp	net-snmp	>= 0 < 5.7.2~dfsg-3	5.7.2~dfsg-3
net-snmp	net-snmp	>= 0 < 5.7.2~dfsg-3	5.7.2~dfsg-3
net-snmp	net-snmp	>= 0 < 5.7.2~dfsg-3	5.7.2~dfsg-3

CVSS provenance

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

osv 4.3 MEDIUM

vendor_debian 4.3 MEDIUM

vendor_redhat 4.3 MEDIUM

vendor_ubuntu 4.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20