CVE-2014-1452

Stack-based buffer overflow in lib/snmpagent.c in bsnmpd, as used in FreeBSD 8.3 through 10.0, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted GETBULK PDU request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 UNKNOWN
ADJACENT_NETWORK
LOW
AV:A/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
freebsdfreebsd
8.3
freebsdfreebsd
8.4
freebsdfreebsd
9.0
freebsdfreebsd
9.1
freebsdfreebsd
9.1:p4
freebsdfreebsd
9.1:p5
freebsdfreebsd
9.2
freebsdfreebsd
9.2:prerelease
freebsdfreebsd
9.2:rc1
freebsdfreebsd
9.2:rc2
freebsdfreebsd
10.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/56496
http://svnweb.freebsd.org/base?view=revision&amp%3Brevision=260636
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:01.bsnmpd.asc
http://www.securityfocus.com/bid/64967
http://www.securitytracker.com/id/1029616
http://secunia.com/advisories/56496
http://svnweb.freebsd.org/base?view=revision&amp%3Brevision=260636
http://www.freebsd.org/security/advisories/FreeBSD-SA-14:01.bsnmpd.asc
http://www.securityfocus.com/bid/64967
http://www.securitytracker.com/id/1029616