Fix bsnmpd remote denial of service vulnerability.
Reported by: dinoex Submitted by: harti Security: FreeBSD-SA-14:01.bsnmpd Security: CVE-2014-1452
This commit is contained in:
parent
9622238c09
commit
ecd241b619
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=260636
@ -510,6 +510,11 @@ snmp_getbulk(struct snmp_pdu *pdu, struct asn_buf *resp_b,
|
|||||||
for (cnt = 0; cnt < pdu->error_index; cnt++) {
|
for (cnt = 0; cnt < pdu->error_index; cnt++) {
|
||||||
eomib = 1;
|
eomib = 1;
|
||||||
for (i = non_rep; i < pdu->nbindings; i++) {
|
for (i = non_rep; i < pdu->nbindings; i++) {
|
||||||
|
|
||||||
|
if (resp->nbindings == SNMP_MAX_BINDINGS)
|
||||||
|
/* PDU is full */
|
||||||
|
goto done;
|
||||||
|
|
||||||
if (cnt == 0)
|
if (cnt == 0)
|
||||||
result = do_getnext(&context, &pdu->bindings[i],
|
result = do_getnext(&context, &pdu->bindings[i],
|
||||||
&resp->bindings[resp->nbindings], pdu);
|
&resp->bindings[resp->nbindings], pdu);
|
||||||
|
Loading…
Reference in New Issue
Block a user