CVE-2014-3565: apple mac_os_x Resource Management Errors
Vulnerability summary
CVE-2014-3565 is a medium (CVSS 5.0) Resource Management Errors vulnerability in apple mac_os_x. EPSS estimates a 4.62% chance of exploitation in the next 30 days, higher than 91.5% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 07-10-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.62%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.62% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sourceforge.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat10 products
- net-snmp< 1:5.5-54.el6 | < 1:5.7.2-24.el7
- net-snmp-agent-libs< 1:5.7.2-24.el7
- net-snmp-debuginfo< 1:5.5-54.el6 | < 1:5.7.2-24.el7
- net-snmp-devel< 1:5.5-54.el6 | < 1:5.7.2-24.el7
- net-snmp-gui< 1:5.7.2-24.el7
Mageia2 products
- net-snmp< 5.7.2-7.3.mga3
- net-snmp< 5.7.2-13.2.mga4
Apple1 product
- mac_os_x10.11.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.04
Debian1 product
- net-snmp< 5.7.2.1~dfsg-7
Net-snmp1 product
- net-snmp≤ 5.7.0 | 5.0 | 5.0.1 | 5.0.2 | 5.0.3 | 5.0.4 | 5.0.5 | 5.0.6 | 5.0.7 | 5.0.8 | 5.0.9 | 5.1 | 5.1.2 | 5.2 | 5.3 | 5.3.0.1 | 5.4 | 5.5 | 5.6
Ubuntu1 product
- net-snmp< 5.7.2~dfsg-8.1ubuntu3.1
7 vendors · 17 products
References
47 links- sourceforge.net/p/net-snmp/code/ci/7f4a7b891332899cea26e95be0337aae01648742/X Refsource CONFIRMExploit
- www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlX Refsource CONFIRM
