Bug 171135

Summary:	snmpd loops forever in host resources (hrStorage)
Product:	Red Hat Enterprise Linux 4	Reporter:	Anders Jennerberg <anders.jennerberg>
Component:	net-snmp	Assignee:	Radek Vokál <rvokal>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.0	CC:	jneedle, laroche, poelstra
Target Milestone:	---
Target Release:	---
Hardware:	i686
OS:	Linux
URL:	http://sourceforge.net/tracker/?group_id=12694&atid=112694&func=detail&aid=986238
Whiteboard:
Fixed In Version:	RHBA-2006-0421	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-08-10 21:31:10 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	181411

Description Anders Jennerberg 2005-10-18 15:19:03 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

Description of problem:
When a normal SNMP requests for particular MIBs (from hrStorage) is sent to the snmpd, the snmpd will enter a loop and stop responding. This has two effects: 
 * The snmpd will stop answering requests.
 * The snmpd will use up all available CPU.

The latest RH patch has been tested and didn't work

Version-Release number of selected component (if applicable):
net-snmp-5.1.2-11

How reproducible:
Always

Steps to Reproduce:
1. Make sure that there is a community with full read access on the test snmp server.
2. snmpget <host> public .1.3.6.1.2.1.25.2.3.1.7.1


Actual Results:  The snmpd started to use all available CPU and the query timed out.

Expected Results:  A normal reply or an error message.

Additional info:

There is a work-around: Add exclude statements for the views in /etc/snmp/snmpd.conf. Assuming you have the 'view all include' statement already, the 'view all exclude' should sort out the problem for this particular MIB.

view all    included  .1                               80
view all    excluded  .1.3.6.1.2.1.25.2.3.1.7

Note: I have not tested if other MIBs are vulnerable and they would be missed by this method.

Comment 1 Radek Vokál 2005-10-19 07:24:35 UTC

Can you retest this issue with net-snmp from RHEL4 update 2? I think this might
be already gone, as several things were fixed in the latest update.

Comment 2 Anders Jennerberg 2005-10-19 12:46:56 UTC

We have tested with the latest patched version (net-snmp-5.1.2-11.EL4.6). Is
that any different from update 2? I did look over the bug fix notes and didn't
find anything that mentioned this particular problem.

Comment 3 Radek Vokál 2005-10-19 13:12:18 UTC

Aha, I see the bug. I haven't realized that it appears only with snmpget and not
with snmpwalk. Patch is ready, this bug gets on proposed list for next update.

Comment 8 Mark Hoover 2006-02-03 17:01:01 UTC

I'm also seeing this problem I believe:

467 root      25   0 11424 4336 2528 R 99.9  0.2  50:14.22 snmpd

I tried this:

view    systemview    included   .1
view    all           excluded   .1.3.6.1.2.1.25.2.3.1.7

And it still seems to lockup.  We're polling our servers with SolarWinds 
Orion.  Not sure if that makes a difference or not.

Comment 21 Red Hat Bugzilla 2006-08-10 21:31:18 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2006-0421.html