CVE-2012-6151: Medium severity Apple iOS and macOS vulnerability
Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.
Other sources
net-snmp was found to be crashing/hanging due to the heavy load on the subagent AgentX.
Here, snmpd is the master agent, AgentX is the subagent registering to handle a MIB and processing GETNEXT requests. When the subagent is under heavy load, requests start to pile up in the queue, replies from the subagent arrive too late (per log messages) and eventually the subagent is timed out. When the timeout occurs there is a high probability of either a crash (Segfault) or a hang (100% CPU utilisation, tight loop in the snmpd code) dependent on the version of the snmpd under test. This also happens when the subagent dies unexpectedly with outstanding transactions unserviced.
References: http://seclists.org/oss-sec/2013/q4/398 http://sourceforge.net/p/net-snmp/bugs/2411/
Patch: http://sourceforge.net/p/net-snmp/patches/1237/?page=0
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6151?
CVE-2012-6151 has a moderate severity rating due to its potential to cause denial of service.
How do I fix CVE-2012-6151?
To fix CVE-2012-6151, upgrade Net-SNMP to version 5.7.2 or later.
Which software versions are affected by CVE-2012-6151?
CVE-2012-6151 affects Net-SNMP versions up to 5.7.1, as well as specific versions of macOS and Ubuntu.
What type of vulnerability is CVE-2012-6151?
CVE-2012-6151 is a denial of service vulnerability that can lead to crashes or hangs.
Can CVE-2012-6151 be exploited remotely?
Yes, CVE-2012-6151 can be exploited remotely through the AgentX protocol.