CVE-2014-2310 - Vulnerability Details - OpenCVE

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00949.

Key SSVC decision points have not yet been added.

Vendors	Products
Net-snmp	Net-snmp

Configuration 1 [-]

cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2014-2348	The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151.
Ubuntu USN	USN-2166-1	Net-SNMP vulnerabilities

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://seclists.org/oss-sec/2014/q1/513
http://seclists.org/oss-sec/2014/q1/527
http://secunia.com/advisories/57870
http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/
http://sourceforge.net/p/net-snmp/patches/1113/
http://ubuntu.com/usn/usn-2166-1
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388
https://nvd.nist.gov/vuln/detail/CVE-2014-2310
https://www.cve.org/CVERecord?id=CVE-2014-2310

History

Mon, 14 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.01108}`	epss `{'score': 0.00949}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2014-04-17T14:00:00

Updated: 2024-08-06T10:06:00.237Z

Reserved: 2014-03-06T00:00:00

Link: CVE-2014-2310

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2014-04-17T14:55:11.217

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-2310

Redhat

Severity : Moderate

Publid Date: 2014-03-06T00:00:00Z

Links: CVE-2014-2310 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-12-21T00:00:00", "descriptions": [{"lang": "en", "value": "The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-04-17T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "57870", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/57870"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/p/net-snmp/patches/1113/"}, {"name": "[oss-security] 20140306 CVE request: net-snmp agentx incorrect handling of multi-object requests DoS", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2014/q1/513"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388"}, {"name": "[oss-security] 20140307 Re: CVE request: net-snmp agentx incorrect handling of multi-object requests DoS", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2014/q1/527"}, {"name": "USN-2166-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://ubuntu.com/usn/usn-2166-1"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-2310", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "57870", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/57870"}, {"name": "http://sourceforge.net/p/net-snmp/patches/1113/", "refsource": "CONFIRM", "url": "http://sourceforge.net/p/net-snmp/patches/1113/"}, {"name": "[oss-security] 20140306 CVE request: net-snmp agentx incorrect handling of multi-object requests DoS", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2014/q1/513"}, {"name": "http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/", "refsource": "CONFIRM", "url": "http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/"}, {"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388", "refsource": "CONFIRM", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388"}, {"name": "[oss-security] 20140307 Re: CVE request: net-snmp agentx incorrect handling of multi-object requests DoS", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2014/q1/527"}, {"name": "USN-2166-1", "refsource": "UBUNTU", "url": "http://ubuntu.com/usn/usn-2166-1"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T10:06:00.237Z"}, "title": "CVE Program Container", "references": [{"name": "57870", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/57870"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/p/net-snmp/patches/1113/"}, {"name": "[oss-security] 20140306 CVE request: net-snmp agentx incorrect handling of multi-object requests DoS", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2014/q1/513"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388"}, {"name": "[oss-security] 20140307 Re: CVE request: net-snmp agentx incorrect handling of multi-object requests DoS", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2014/q1/527"}, {"name": "USN-2166-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://ubuntu.com/usn/usn-2166-1"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-2310", "datePublished": "2014-04-17T14:00:00", "dateReserved": "2014-03-06T00:00:00", "dateUpdated": "2024-08-06T10:06:00.237Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*", "matchCriteriaId": "23350AD5-482A-4158-ADA0-6E6E4989E9C7", "versionEndIncluding": "5.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012-6151."}, {"lang": "es", "value": "El subagente AgentX en Net-SNMP anterior a 5.4.4 permite a atacantes remotos causar una denegaci\u00f3n de servicio (cuelgue) mediante el envio de una solicitud multi-objeto con un identificador de objeto (OID) que contiene m\u00e1s subidentificadores que solicitudes anteriores, una vulnerabilidad diferente a CVE-2012-6151."}], "id": "CVE-2014-2310", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-04-17T14:55:11.217", "references": [{"source": "cve@mitre.org", "url": "http://seclists.org/oss-sec/2014/q1/513"}, {"source": "cve@mitre.org", "url": "http://seclists.org/oss-sec/2014/q1/527"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/57870"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/p/net-snmp/patches/1113/"}, {"source": "cve@mitre.org", "url": "http://ubuntu.com/usn/usn-2166-1"}, {"source": "cve@mitre.org", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2014/q1/513"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2014/q1/527"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/57870"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/p/net-snmp/code/ci/eb816330a1887798d844d2fd5dc6482002123cbd/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/p/net-snmp/patches/1113/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://ubuntu.com/usn/usn-2166-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684388"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}