MNBSD-2014-1: Stack buffer overflow in bsnmpd GETBULK handling

Description

bsnmpd(1) contained a stack-based buffer overflow when processing certain SNMP GETBULK PDU requests. A malicious client able to reach the daemon could send crafted queries to crash bsnmpd or potentially execute arbitrary code.

Affected Versions

bsnmpd

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-14:01.bsnmpd.asc
• https://www.cve.org/CVERecord?id=CVE-2014-1452

Additional Information

Aliases: CVE-2014-1452

Published: January 14, 2014
Last Modified: January 14, 2014