RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1023570 - libnetsnmpagent.so crash under certain conditions - patched upstream in 2009
Summary: libnetsnmpagent.so crash under certain conditions - patched upstream in 2009
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: net-snmp
Version: 6.4
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: Jan Safranek
QA Contact: Marek Haicman
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-10-25 19:09 UTC by Dan Tucny
Modified: 2015-07-22 07:22 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: snmpd did not properly check for errors when processing AgentX response from a subagent. Consequence: snmpd could crash. Fix: Additional checks in AgentX client processing ensure that snmpd does not crash.
Clone Of:
Environment:
Last Closed: 2015-07-22 07:22:15 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
el5 spec diff (631 bytes, patch)
2014-01-09 14:44 UTC, Trevor Hemsley 		no flags Details | Diff
Patch for net-snmp-5.3 (647 bytes, patch)
2014-01-09 14:45 UTC, Trevor Hemsley 		no flags Details | Diff
View All


Links
System ID Private Priority Status Summary Last Updated
CentOS 6712 0 None None None Never
Red Hat Product Errata RHSA-2015:1385 0 normal SHIPPED_LIVE Moderate: net-snmp security and bug fix update 2015-07-20 18:07:39 UTC

Description Dan Tucny 2013-10-25 19:09:03 UTC 
Description of problem:
Under certain circumstances libnetsnmpagent.so can fail taking down whatever is linked with it.

This has been observed with Asterisk 1.8 and 11 running on CentOS 6.3 and 6.4.

This appears to be identical to an issue reported and resolved in the upstream project - http://sourceforge.net/p/net-snmp/bugs/2073/ - patch visible at http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=revision&revision=17856

The current version of net-snmp in CentOS & RHEL 6.4, 5.5-44.el6_4.4, does not have this patch incorporated.

Version-Release number of selected component (if applicable):
5.5-44.el6_4.4

How reproducible:
Not simple

Steps to Reproduce:
1. 
2.
3.

Actual results:
Sometimes crashes can occur in whatever application uses libnetsnmpagent, in this case Asterisk's res_snmp module.

Expected results:
No crashes would be ideal

Additional info:
This has been raised on the CentOS issue tracker as http://bugs.centos.org/view.php?id=6712

Previously raised Asterisk issue for this crash:
https://issues.asterisk.org/jira/browse/ASTERISK-22014
Comment 2 RHEL Program Management 2013-10-28 20:25:16 UTC 
This request was not resolved in time for the current release.
Red Hat invites you to ask your support representative to
propose this request, if still desired, for consideration in
the next release of Red Hat Enterprise Linux.
Comment 3 Trevor Hemsley 2014-01-09 14:09:58 UTC 
net-snmp-5.3 is also unpatched on el5
Comment 4 Trevor Hemsley 2014-01-09 14:44:18 UTC 
Created attachment 847680 [details]
el5 spec diff

Patch against current el5 net-snmp.spec file
Comment 5 Trevor Hemsley 2014-01-09 14:45:12 UTC 
Created attachment 847681 [details]
Patch for net-snmp-5.3

Patch for issue on el5
Comment 6 Patrick Laimbock 2014-02-09 13:11:30 UTC 
I just checked net-snmp-5.5-49.el6.src.rpm in EL6.5 and the patch/fix is not present either. Will this fix be included in a net-snmp update for EL6.5 or will it be included in EL6.6?
Comment 7 Trevor Hemsley 2014-05-02 11:13:01 UTC 
Technically this is a DoS vulnerabilty for any application using net-snmp since I can crash random apps just by running snmpwalk a few times. Is there any news on patching this?
Comment 8 Jan Safranek 2014-05-05 10:28:45 UTC 
Please note that Bugzilla is not a support tool. I acknowledge there might be a bug in snmpd, I understand it's annoying one, however, adding new comments here won't change anything.

Please create tickets at access.redhat.com to get the service you pay for.
Comment 13 errata-xmlrpc 2015-07-22 07:22:15 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-1385.html
Note You need to log in before you can comment on or make changes to this bug.