Synopsis

Moderate: net-snmp security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

Updated net-snmp packages that fix one security issue and multiple bugs are
now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

The net-snmp packages provide various libraries and tools for the Simple
Network Management Protocol (SNMP), including an SNMP library, an
extensible agent, tools for requesting or setting information from SNMP
agents, tools for generating and handling SNMP traps, a version of the
netstat command which uses SNMP, and a Tk/Perl Management Information Base
(MIB) browser.

An array index error, leading to an out-of-bounds buffer read flaw, was
found in the way the net-snmp agent looked up entries in the extension
table. A remote attacker with read privileges to a Management Information
Base (MIB) subtree handled by the "extend" directive (in
"/etc/snmp/snmpd.conf") could use this flaw to crash snmpd via a crafted
SNMP GET request. (CVE-2012-2141)

These updated net-snmp packages also include numerous bug fixes. Space
precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 6.3 Technical Notes for
information on the most significant of these changes.

All users of net-snmp are advised to upgrade to these updated packages,
which contain backported patches to resolve these issues. After installing
the update, the snmpd and snmptrapd daemons will be restarted
automatically.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 736580 - snmpd memory leak when AgentX subagent disconnects while processing a request
• BZ - 748410 - hrStorageSize from HOST-RESOURCES-TYPES mib reports incorrect size for filesystems > 16TB
• BZ - 754275 - Cannot create new rows in snmpTargetAddrTable
• BZ - 757685 - net-snmp ignores reiserfs formatted partitions
• BZ - 786931 - sysObjectID cannot be set to an OID value with a length greater than 10.
• BZ - 788954 - snmpd: error finding row index in _ifXTable_container_row_restore
• BZ - 799291 - proxied OIDs unspecified in proxy statement in snmpd.conf
• BZ - 815813 - CVE-2012-2141 net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash)
• BZ - 822480 - move /var/lib/net-snmp from net-snmp to net-snmp-libs

CVEs

• CVE-2012-2141

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/net-snmp.html#RHSA-2012-0876

Red Hat Enterprise Linux Server 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
x86_64
net-snmp-5.5-41.el6.x86_64.rpm	SHA-256: 3b309fa07218a13468d6db11ceddb55b00a14663ba662f628738069a7b64e3b7
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-devel-5.5-41.el6.x86_64.rpm	SHA-256: 9c7d20a63f85a68974424743d343bee872a8e9ad4943d6693aaf131ae9f3f001
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-libs-5.5-41.el6.x86_64.rpm	SHA-256: 98f871e41b412390d6752bfae5d137df33a3c5879b02526509afb8e78177268a
net-snmp-perl-5.5-41.el6.x86_64.rpm	SHA-256: 91dc9b2522a1718d420dfb1dfd7cb01e3631f0d9a4254a101447809977bd00ec
net-snmp-python-5.5-41.el6.x86_64.rpm	SHA-256: 2f99a089e789b939d9400fa8df06e943bf8ca0bf55e106a840781978ce1a9a80
net-snmp-utils-5.5-41.el6.x86_64.rpm	SHA-256: c25db7012e54db686266c81614134a752edfda2b17ac1dc8f632e4e624713021
i386
net-snmp-5.5-41.el6.i686.rpm	SHA-256: 01329b7cefae85eb38ba6b093f6aeb3e152a65dfdc19d70fa266038e5fc2a712
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-perl-5.5-41.el6.i686.rpm	SHA-256: 8c15d6b762708fdf20e5d2a4d2942a62a3108b859c0a0cf8f2923d391d6f43a3
net-snmp-python-5.5-41.el6.i686.rpm	SHA-256: 7705ed51a75700c6623b07f13faca43026d8c2f592a9e1d6be3993c12a9b895e
net-snmp-utils-5.5-41.el6.i686.rpm	SHA-256: 954fd91a459b16e40c9e0cecdebb5c4faed3fd0811c1a9ea65a4308a8d6bcbed

Red Hat Enterprise Linux Workstation 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
x86_64
net-snmp-5.5-41.el6.x86_64.rpm	SHA-256: 3b309fa07218a13468d6db11ceddb55b00a14663ba662f628738069a7b64e3b7
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-devel-5.5-41.el6.x86_64.rpm	SHA-256: 9c7d20a63f85a68974424743d343bee872a8e9ad4943d6693aaf131ae9f3f001
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-libs-5.5-41.el6.x86_64.rpm	SHA-256: 98f871e41b412390d6752bfae5d137df33a3c5879b02526509afb8e78177268a
net-snmp-perl-5.5-41.el6.x86_64.rpm	SHA-256: 91dc9b2522a1718d420dfb1dfd7cb01e3631f0d9a4254a101447809977bd00ec
net-snmp-python-5.5-41.el6.x86_64.rpm	SHA-256: 2f99a089e789b939d9400fa8df06e943bf8ca0bf55e106a840781978ce1a9a80
net-snmp-utils-5.5-41.el6.x86_64.rpm	SHA-256: c25db7012e54db686266c81614134a752edfda2b17ac1dc8f632e4e624713021
i386
net-snmp-5.5-41.el6.i686.rpm	SHA-256: 01329b7cefae85eb38ba6b093f6aeb3e152a65dfdc19d70fa266038e5fc2a712
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-perl-5.5-41.el6.i686.rpm	SHA-256: 8c15d6b762708fdf20e5d2a4d2942a62a3108b859c0a0cf8f2923d391d6f43a3
net-snmp-python-5.5-41.el6.i686.rpm	SHA-256: 7705ed51a75700c6623b07f13faca43026d8c2f592a9e1d6be3993c12a9b895e
net-snmp-utils-5.5-41.el6.i686.rpm	SHA-256: 954fd91a459b16e40c9e0cecdebb5c4faed3fd0811c1a9ea65a4308a8d6bcbed

Red Hat Enterprise Linux Desktop 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
x86_64
net-snmp-5.5-41.el6.x86_64.rpm	SHA-256: 3b309fa07218a13468d6db11ceddb55b00a14663ba662f628738069a7b64e3b7
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-devel-5.5-41.el6.x86_64.rpm	SHA-256: 9c7d20a63f85a68974424743d343bee872a8e9ad4943d6693aaf131ae9f3f001
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-libs-5.5-41.el6.x86_64.rpm	SHA-256: 98f871e41b412390d6752bfae5d137df33a3c5879b02526509afb8e78177268a
net-snmp-perl-5.5-41.el6.x86_64.rpm	SHA-256: 91dc9b2522a1718d420dfb1dfd7cb01e3631f0d9a4254a101447809977bd00ec
net-snmp-python-5.5-41.el6.x86_64.rpm	SHA-256: 2f99a089e789b939d9400fa8df06e943bf8ca0bf55e106a840781978ce1a9a80
net-snmp-utils-5.5-41.el6.x86_64.rpm	SHA-256: c25db7012e54db686266c81614134a752edfda2b17ac1dc8f632e4e624713021
i386
net-snmp-5.5-41.el6.i686.rpm	SHA-256: 01329b7cefae85eb38ba6b093f6aeb3e152a65dfdc19d70fa266038e5fc2a712
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-perl-5.5-41.el6.i686.rpm	SHA-256: 8c15d6b762708fdf20e5d2a4d2942a62a3108b859c0a0cf8f2923d391d6f43a3
net-snmp-python-5.5-41.el6.i686.rpm	SHA-256: 7705ed51a75700c6623b07f13faca43026d8c2f592a9e1d6be3993c12a9b895e
net-snmp-utils-5.5-41.el6.i686.rpm	SHA-256: 954fd91a459b16e40c9e0cecdebb5c4faed3fd0811c1a9ea65a4308a8d6bcbed

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
s390x
net-snmp-5.5-41.el6.s390x.rpm	SHA-256: 1a15502c46c6b982c0d575a1465e7b23c087c314da2586190fe5d0c2376ee6ae
net-snmp-debuginfo-5.5-41.el6.s390.rpm	SHA-256: 53ff2f4c21546b6b787ba881f7ffd02938aa0fd4f67e2be59563a3f88765c913
net-snmp-debuginfo-5.5-41.el6.s390x.rpm	SHA-256: 15d953bf7cb8c1f8d79953878f02d8b6243cb979cd56e9019c4887e555410dfb
net-snmp-devel-5.5-41.el6.s390.rpm	SHA-256: 4d26392da6199b3b17a044df8f5683c4cca4e5dcd504674e012ead6ac1f0ca90
net-snmp-devel-5.5-41.el6.s390x.rpm	SHA-256: 57a04eeadb7f1d637e07f1084ee82274d44f9582401b527471d9f8cc4aa78235
net-snmp-libs-5.5-41.el6.s390.rpm	SHA-256: eaaa1532aa6f695fb1079e3036a816922c2c0891acec6e4139c4c9100022cedc
net-snmp-libs-5.5-41.el6.s390x.rpm	SHA-256: ed4c378178fa18d211d9ca8848fde9e68e5cd220d79dd37e7d1670bc77ae7e7f
net-snmp-perl-5.5-41.el6.s390x.rpm	SHA-256: 4be2b6eca5bf8ba0edbb6da00285b51dc24e503c7d6d3d6a4399af25a91fe2f3
net-snmp-python-5.5-41.el6.s390x.rpm	SHA-256: 5863b1eada7500e9ab617d995cce9a3e98c70d31cac38dccf97aae8c1a911d14
net-snmp-utils-5.5-41.el6.s390x.rpm	SHA-256: d4acabaefda323ace594cd3fe814a5b0a7c8dff20d80774cc74a541a1ea5f6e9

Red Hat Enterprise Linux for Power, big endian 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
ppc64
net-snmp-5.5-41.el6.ppc64.rpm	SHA-256: 602a320a1721167e43a466e4159a5f3c7f8effdead4fd60a0cd35abf4763e771
net-snmp-debuginfo-5.5-41.el6.ppc.rpm	SHA-256: fdff347a8dd567fbd1522be62136601ddb1f586261ef1be3660a9b9f7be8a307
net-snmp-debuginfo-5.5-41.el6.ppc64.rpm	SHA-256: 0321b6298c1daba5b9dec6c9d4152649ba47864e6406ea77afe65e9186bbe62c
net-snmp-devel-5.5-41.el6.ppc.rpm	SHA-256: 8bd8283f3d909927bab3b0986525c8c5da5f089cbccc03d84f7580419865c151
net-snmp-devel-5.5-41.el6.ppc64.rpm	SHA-256: 6bc36f16f235bc3c99c02265eb2f01434ba8f0ffc7dd6981d26dd04c24c7a4b5
net-snmp-libs-5.5-41.el6.ppc.rpm	SHA-256: 58eb60db5ed4385e70f0dac0ef90c14889bdeefb4824d513e30c072539cf9c70
net-snmp-libs-5.5-41.el6.ppc64.rpm	SHA-256: 9d054e67f69ecdb21d7a0ac132043628205d88abd9adfcd1b212042f6b9c10f0
net-snmp-perl-5.5-41.el6.ppc64.rpm	SHA-256: 7f27251db6c19d383861f680f564dfb86305c0a2486aab7f4dd9502ccbbec5db
net-snmp-python-5.5-41.el6.ppc64.rpm	SHA-256: ccf837b007d848a1c94a359e6d0d5f8b5c69df697a8de70747d1da1ee7111bb1
net-snmp-utils-5.5-41.el6.ppc64.rpm	SHA-256: 5d92dfa76de1dad1c6be3005909ce1d640508330eaa8fd198aea91ad2750add9

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
x86_64
net-snmp-5.5-41.el6.x86_64.rpm	SHA-256: 3b309fa07218a13468d6db11ceddb55b00a14663ba662f628738069a7b64e3b7
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-devel-5.5-41.el6.x86_64.rpm	SHA-256: 9c7d20a63f85a68974424743d343bee872a8e9ad4943d6693aaf131ae9f3f001
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-libs-5.5-41.el6.x86_64.rpm	SHA-256: 98f871e41b412390d6752bfae5d137df33a3c5879b02526509afb8e78177268a
net-snmp-perl-5.5-41.el6.x86_64.rpm	SHA-256: 91dc9b2522a1718d420dfb1dfd7cb01e3631f0d9a4254a101447809977bd00ec
net-snmp-python-5.5-41.el6.x86_64.rpm	SHA-256: 2f99a089e789b939d9400fa8df06e943bf8ca0bf55e106a840781978ce1a9a80
net-snmp-utils-5.5-41.el6.x86_64.rpm	SHA-256: c25db7012e54db686266c81614134a752edfda2b17ac1dc8f632e4e624713021

Red Hat Enterprise Linux Server from RHUI 6

SRPM
net-snmp-5.5-41.el6.src.rpm	SHA-256: f474394352c46646a81e8ab9a7b6ad09d2eeb1a6458e33611d343ecd65d8ae07
x86_64
net-snmp-5.5-41.el6.x86_64.rpm	SHA-256: 3b309fa07218a13468d6db11ceddb55b00a14663ba662f628738069a7b64e3b7
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-debuginfo-5.5-41.el6.x86_64.rpm	SHA-256: a1a629846e5d8ce68ad766853b26cf16cdd541de1266d5cd2617834b93382ea9
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-devel-5.5-41.el6.x86_64.rpm	SHA-256: 9c7d20a63f85a68974424743d343bee872a8e9ad4943d6693aaf131ae9f3f001
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-libs-5.5-41.el6.x86_64.rpm	SHA-256: 98f871e41b412390d6752bfae5d137df33a3c5879b02526509afb8e78177268a
net-snmp-perl-5.5-41.el6.x86_64.rpm	SHA-256: 91dc9b2522a1718d420dfb1dfd7cb01e3631f0d9a4254a101447809977bd00ec
net-snmp-python-5.5-41.el6.x86_64.rpm	SHA-256: 2f99a089e789b939d9400fa8df06e943bf8ca0bf55e106a840781978ce1a9a80
net-snmp-utils-5.5-41.el6.x86_64.rpm	SHA-256: c25db7012e54db686266c81614134a752edfda2b17ac1dc8f632e4e624713021
i386
net-snmp-5.5-41.el6.i686.rpm	SHA-256: 01329b7cefae85eb38ba6b093f6aeb3e152a65dfdc19d70fa266038e5fc2a712
net-snmp-debuginfo-5.5-41.el6.i686.rpm	SHA-256: 818211855d490798368c196df2f1a34f2dbb5104ea7f8da61891029c78318070
net-snmp-devel-5.5-41.el6.i686.rpm	SHA-256: c4d42bbdb8194ec644045216c0df10b36a13aca2a7df8b4444c3de5d009f41ab
net-snmp-libs-5.5-41.el6.i686.rpm	SHA-256: c70453033add18291a1abe84d866932510f0e291be5fa97a7583d33f9dad8166
net-snmp-perl-5.5-41.el6.i686.rpm	SHA-256: 8c15d6b762708fdf20e5d2a4d2942a62a3108b859c0a0cf8f2923d391d6f43a3
net-snmp-python-5.5-41.el6.i686.rpm	SHA-256: 7705ed51a75700c6623b07f13faca43026d8c2f592a9e1d6be3993c12a9b895e
net-snmp-utils-5.5-41.el6.i686.rpm	SHA-256: 954fd91a459b16e40c9e0cecdebb5c4faed3fd0811c1a9ea65a4308a8d6bcbed