Your message dated Tue, 15 Apr 2014 19:47:06 +0000
with message-id <[email protected]>
and subject line Bug#684388: fixed in net-snmp 5.4.3~dfsg-2.8
has caused the Debian Bug report #684388,
regarding agentx: CVE-2014-2310: Oversized Object ID
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
684388: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libsnmp15
Version: 5.4.3~dfsg-2.5
Severity: important
Tags: upstream patch
Hi!
AgentX support is ineffective when a manager requests unrelated OID in
the same GET request. snmpd will send those unrelated variables into
the same PDU to the subagent and the subagent will choke with:
agentx: Oversized Object ID
This happens if one of the requested OID is larger than the previous
one:
agentx/master: request for variable (iso.3.6.1.2.1.2.2.1.7.7)
agentx/master: request for variable (iso.3.6.1.2.1.2.2.1.2.10)
agentx/master: request for variable (iso.3.6.1.2.1.2.2.1.8.7)
agentx/master: request for variable (iso.3.6.1.3.53.5.5.2.1.3.101)
First three OID contain 11 subid while the next one has 12
subid. snmpd will try several time to communicate those OID to the
subagent and will give up. A manager requesting always the same OID
will never get an answer.
The bug is fixed upstream in 5.4.4. I attach the revelant patch
extracted from the git repository. I think it may warrant a freeze
exception. The bug is 100% reproducible on my platform.
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libsnmp15 depends on:
ii libc6 2.13-35
ii libperl5.14 5.14.2-12
ii libsensors4 1:3.3.2-2
ii libsnmp-base 5.4.3~dfsg-2.5
ii libssl1.0.0 1.0.1c-4
ii libwrap0 7.6.q-24
libsnmp15 recommends no packages.
libsnmp15 suggests no packages.
-- Configuration Files:
/etc/snmp/snmp.conf changed:
-- no debconf information
>From 8d160ac04e7087c10fbda1d1d76d5f2854d58057 Mon Sep 17 00:00:00 2001
From: Wes Hardaker <[email protected]>
Date: Wed, 29 Dec 2010 01:37:32 +0000
Subject: [PATCH] NEWS: snmpd: Patch 3141462: from fenner: fix agentx subagent
issues with multiple-object requests
git-svn-id: file:///home/hardaker/lib/sf-bkups/net-snmp-convert-svnrepo/branches/V5-6-patches@19760 06827809-a52a-0410-b366-d66718629ded
---
agent/mibgroup/agentx/protocol.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
Index: net-snmp-5.4.3~dfsg/agent/mibgroup/agentx/protocol.c
===================================================================
--- net-snmp-5.4.3~dfsg.orig/agent/mibgroup/agentx/protocol.c 2010-03-11 13:37:05.000000000 +0100
+++ net-snmp-5.4.3~dfsg/agent/mibgroup/agentx/protocol.c 2012-08-09 13:12:39.000000000 +0200
@@ -1765,11 +1765,11 @@
(u_char *) end_oid_buf,
end_oid_buf_len);
}
+ oid_buf_len = MAX_OID_LEN;
+ end_oid_buf_len = MAX_OID_LEN;
}
DEBUGINDENTLESS();
- oid_buf_len = MAX_OID_LEN;
- end_oid_buf_len = MAX_OID_LEN;
break;
--- End Message ---
--- Begin Message ---
Source: net-snmp
Source-Version: 5.4.3~dfsg-2.8
We believe that the bug you reported is fixed in the latest version of
net-snmp, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon Paillard <[email protected]> (supplier of updated net-snmp package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 17 Mar 2014 20:56:52 +0100
Source: net-snmp
Binary: snmpd snmp libsnmp-base libsnmp15 libsnmp15-dbg libsnmp-dev
libsnmp-perl libsnmp-python tkmib
Architecture: source amd64 all
Version: 5.4.3~dfsg-2.8
Distribution: stable
Urgency: medium
Maintainer: Net-SNMP Packaging Team <[email protected]>
Changed-By: Simon Paillard <[email protected]>
Description:
libsnmp-base - SNMP (Simple Network Management Protocol) MIBs and documentation
libsnmp-dev - SNMP (Simple Network Management Protocol) development files
libsnmp-perl - SNMP (Simple Network Management Protocol) Perl5 support
libsnmp-python - SNMP (Simple Network Management Protocol) Python support
libsnmp15 - SNMP (Simple Network Management Protocol) library
libsnmp15-dbg - SNMP (Simple Network Management Protocol) library debug
snmp - SNMP (Simple Network Management Protocol) applications
snmpd - SNMP (Simple Network Management Protocol) agents
tkmib - SNMP (Simple Network Management Protocol) MIB browser
Closes: 684388
Changes:
net-snmp (5.4.3~dfsg-2.8) stable; urgency=medium
.
* Non-maintainer upload.
* Fix agentx subagent issues with multiple-object requests and increasing
object length (CVE-2014-2310) (Closes: #684388)
Checksums-Sha1:
09b47b729afcf2a1a1e07471c157c720de41dc13 2731 net-snmp_5.4.3~dfsg-2.8.dsc
9ffaca17a55265fe03284826a6f15cd521f6fd54 56046
net-snmp_5.4.3~dfsg-2.8.debian.tar.gz
e261f160f299dfe5f461ce56b6cb8a1e523ea843 967714 snmpd_5.4.3~dfsg-2.8_amd64.deb
99cdbd168619827a4e5153f7f9bc97d4ebe25d8d 1050506 snmp_5.4.3~dfsg-2.8_amd64.deb
a145a5124576bde88b302b3d681cc49efdfb17b7 1100824
libsnmp-base_5.4.3~dfsg-2.8_all.deb
03bd9ec6b5beaee194d17f9d60c636f7c039b2eb 2246268
libsnmp15_5.4.3~dfsg-2.8_amd64.deb
a485fbf9b0edb65af5fbfdcf2bb677dd282193db 2519598
libsnmp15-dbg_5.4.3~dfsg-2.8_amd64.deb
46036e68274901e946aec74cc374ad738a3b2b82 1828306
libsnmp-dev_5.4.3~dfsg-2.8_amd64.deb
d2c7a32a8484660666b70e39e486e7874bc6b26a 128780
libsnmp-perl_5.4.3~dfsg-2.8_amd64.deb
8f68addfa17436ecd84edbc695e5cd687bce377c 927468
libsnmp-python_5.4.3~dfsg-2.8_amd64.deb
48816f1e3722c60a5c8eac7e175a2ce36fd545b5 982140 tkmib_5.4.3~dfsg-2.8_all.deb
Checksums-Sha256:
f1b840e6d9f30d69561257253a318d63e1bdc7186b94c6ce03eae5da28415ed0 2731
net-snmp_5.4.3~dfsg-2.8.dsc
f34250b7e4d858ae27ee6e56d61782dbcf51d8aafaf09fdf1e77d441ca12eedd 56046
net-snmp_5.4.3~dfsg-2.8.debian.tar.gz
20750694a96a1469cf9626e38f5856581b52e4c86942f5f4102c01664c9a6cfd 967714
snmpd_5.4.3~dfsg-2.8_amd64.deb
2e5ac7732b35194c5cbadb1514fce61607c71831444823a877eec1e3d9b2cd59 1050506
snmp_5.4.3~dfsg-2.8_amd64.deb
b687bbe36f5eec70c5a8cfe8180a98ae250a0c32b60e3192d02a66287c9dbb26 1100824
libsnmp-base_5.4.3~dfsg-2.8_all.deb
e998c17f88c0a0044eb737689e32cb52d1bd2e824d082d2e4b7841a7a6ec008d 2246268
libsnmp15_5.4.3~dfsg-2.8_amd64.deb
8f66ee4bebebb81fccb77630f7e49a28b23e06862e907db3e5ff057634293947 2519598
libsnmp15-dbg_5.4.3~dfsg-2.8_amd64.deb
781479f74b073dcaeed487b8eb10cfffb2617cacae145d4d3a28793a58d1f23c 1828306
libsnmp-dev_5.4.3~dfsg-2.8_amd64.deb
48b60d9ca42cad3f7c729bace400166d8e6052b5407d31e4d05f3e904f09e1ae 128780
libsnmp-perl_5.4.3~dfsg-2.8_amd64.deb
7807845b8764b82513cc2fad29aaf0c623b091588cecb2776bf50e406b630cd3 927468
libsnmp-python_5.4.3~dfsg-2.8_amd64.deb
736c7efe35d90c6b62b6841103070dc61093a2b970d09e0fe1fbed23a2a5a66c 982140
tkmib_5.4.3~dfsg-2.8_all.deb
Files:
866ca01b4072ac5627b8cc120fc4bf4d 2731 net optional net-snmp_5.4.3~dfsg-2.8.dsc
89b9e70e419f6e8a730c183b57f0a46a 56046 net optional
net-snmp_5.4.3~dfsg-2.8.debian.tar.gz
9634b88d7edbe617996568ab246893f8 967714 net optional
snmpd_5.4.3~dfsg-2.8_amd64.deb
03b40fb5fa6eb7bed58cea090f05ab09 1050506 net optional
snmp_5.4.3~dfsg-2.8_amd64.deb
2f9535b946550f5aba89abb21b05aad2 1100824 libs optional
libsnmp-base_5.4.3~dfsg-2.8_all.deb
7c9610e9413786a8af2c0d901e3c6e11 2246268 libs optional
libsnmp15_5.4.3~dfsg-2.8_amd64.deb
cc3e8fc86366562de9c350ff83bc1770 2519598 debug extra
libsnmp15-dbg_5.4.3~dfsg-2.8_amd64.deb
58200125c1ae421523e31e418ec53d82 1828306 libdevel optional
libsnmp-dev_5.4.3~dfsg-2.8_amd64.deb
751a4a20c02d3f906ee3f0e9f53b7d70 128780 perl optional
libsnmp-perl_5.4.3~dfsg-2.8_amd64.deb
ad70a2e3e9c08f8fc4153d7439ab1823 927468 python optional
libsnmp-python_5.4.3~dfsg-2.8_amd64.deb
0295e2b041423f6147fd938ab7a87a56 982140 net optional
tkmib_5.4.3~dfsg-2.8_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=jkTL
-----END PGP SIGNATURE-----
--- End Message ---
