[security] Fixes for DSA-4314-1 net-snmp (#2152)

CVE-case:
https://security-tracker.debian.org/tracker/CVE-2018-18065
This commit is contained in:
zhenggen-xu 2018-10-15 15:01:39 -07:00 committed by lguohan
parent a401ee7fa8
commit e2ffb589ed
2 changed files with 37 additions and 0 deletions

View File

@ -0,0 +1,36 @@
From 2170e345858738e65d3156a49d3186e4a9288821 Mon Sep 17 00:00:00 2001
From: Zhenggen Xu <zxu@linkedin.com>
Date: Fri, 12 Oct 2018 17:13:54 -0700
Subject: [PATCH] Subject: [PATCH] CHANGES: BUG: 2743: snmpd crashes when
receiving a GetNext PDU with multiple Varbinds
skip out-of-range varbinds when calling next handler
---
agent/helpers/table.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/agent/helpers/table.c b/agent/helpers/table.c
index 882e84c..b943d6e 100644
--- a/agent/helpers/table.c
+++ b/agent/helpers/table.c
@@ -406,6 +406,8 @@ table_helper_handler(netsnmp_mib_handler *handler,
if (reqinfo->mode == MODE_GET)
table_helper_cleanup(reqinfo, request,
SNMP_NOSUCHOBJECT);
+ else
+ request->processed = 1; /* skip if next handler called */
continue;
}
@@ -483,6 +485,8 @@ table_helper_handler(netsnmp_mib_handler *handler,
#endif /* NETSNMP_NO_WRITE_SUPPORT */
table_helper_cleanup(reqinfo, request,
SNMP_NOSUCHOBJECT);
+ else
+ request->processed = 1; /* skip if next handler called */
continue;
}
/*
--
2.18.0

View File

@ -1,2 +1,3 @@
0001-SNMP-Stop-spamming-logs-with-statfs-permission-denie.patch
0002-at.c-properly-check-return-status-from-realloc.-Than.patch
0003-CHANGES-BUG-2743-snmpd-crashes-when-receiving-a-GetN.patch