Security update for net-snmp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1524-1 Final 1 1 2015-08-17T09:48:10Z current 2015-08-17T09:48:10Z 2015-08-17T09:48:10Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for net-snmp net-snmp was updated to fix one security vulnerability and several bugs. - fix a vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Add build requirement 'procps' to fix a net-snmp-config error. (bsc#935863) - add support for /dev/shm in snmp hostmib (bnc#853382, FATE#316893). - stop snmptrapd on package removal. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-net-snmp-12079,sdksp4-net-snmp-12079,sledsp3-net-snmp-12079,sledsp4-net-snmp-12079,slessp3-net-snmp-12079,slessp4-net-snmp-12079 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151524-1/ Link for SUSE-SU-2015:1524-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001585.html E-Mail link for SUSE-SU-2015:1524-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/853382 SUSE Bug 853382 https://bugzilla.suse.com/935863 SUSE Bug 935863 https://bugzilla.suse.com/940188 SUSE Bug 940188 https://www.suse.com/security/cve/CVE-2015-5621/ SUSE CVE CVE-2015-5621 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 libsnmp15-32bit-5.4.2.1-8.12.24.1 net-snmp-devel-5.4.2.1-8.12.24.1 net-snmp-devel-32bit-5.4.2.1-8.12.24.1 libsnmp15-5.4.2.1-8.12.24.1 net-snmp-5.4.2.1-8.12.24.1 perl-SNMP-5.4.2.1-8.12.24.1 snmp-mibs-5.4.2.1-8.12.24.1 libsnmp15-x86-5.4.2.1-8.12.24.1 libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3 libsnmp15-x86-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3 net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3 perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3 snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3 libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libsnmp15-x86-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP4 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP4 libsnmp15-x86-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP4 net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP4 snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server 11 SP4 libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libsnmp15-x86-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libsnmp15-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libsnmp15-x86-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 net-snmp-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-SNMP-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 snmp-mibs-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 net-snmp-devel-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 net-snmp-devel-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 libsnmp15-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 net-snmp-devel-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 net-snmp-devel-32bit-5.4.2.1-8.12.24.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet. CVE-2015-5621 SUSE Linux Enterprise Desktop 11 SP3:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP3:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP3:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP3:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP3:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP4:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP4:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP4:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP4:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Desktop 11 SP4:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libsnmp15-x86-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3:libsnmp15-x86-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP3:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP4:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP4:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP4:libsnmp15-x86-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP4:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP4:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server 11 SP4:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libsnmp15-x86-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsnmp15-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsnmp15-x86-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:net-snmp-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-SNMP-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:snmp-mibs-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Software Development Kit 11 SP3:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Software Development Kit 11 SP3:net-snmp-devel-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Software Development Kit 11 SP3:net-snmp-devel-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libsnmp15-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Software Development Kit 11 SP4:net-snmp-devel-32bit-5.4.2.1-8.12.24.1 SUSE Linux Enterprise Software Development Kit 11 SP4:net-snmp-devel-5.4.2.1-8.12.24.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151524-1/ https://www.suse.com/security/cve/CVE-2015-5621.html CVE-2015-5621 https://bugzilla.suse.com/1111123 SUSE Bug 1111123 https://bugzilla.suse.com/940188 SUSE Bug 940188 https://bugzilla.suse.com/969779 SUSE Bug 969779