A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to crash.

A remote denial-of-Service flaw was found in the way snmptrapd handled trap requests with empty community string, when the perl handler was enabled. A remote attacker could use this flaw to cause snmp to crash.

More details about the flaw is available at: https://bugzilla.redhat.com/showbug.cgi?id=1072044

Proposed upstream patch: http://sourceforge.net/p/net-snmp/patches/1275/