K17315 : SNMP vulnerability CVE-2014-3565

Security Advisory Description

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
(
CVE-2014-3565
)
Impact
The snmpdtrapdprocess may stop responding if a specially crafted SNMP trap is received. BIG-IP, Enterprise Manager, and BIG-IQ systems do not use the included snmptrapdbinary in any supported configuration. On Traffix systems, the management station will be unable to search the splunk database for traps that occurred while snmptrapdwas down.