CVE-2014-2284
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1,...
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
- Record
CVE-2014-2284- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
- Record
CVE-2014-2284- Updated
- 2026-11-02
EUVDEUVD-2014-2322 No score
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
- Record
EUVD-2014-2322- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87fv-phj9-vf23 No score
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1,...
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
- Record
GHSA-87fv-phj9-vf23- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
- Record
CVE-2014-2284- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-2284 No score
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
- Record
DEBIAN-CVE-2014-2284- Updated
- 2026-11-02
OSVMGASA-2014-0122 No score
Updated net-snmp packages fix two vulnerabilities
Updated net-snmp packages fix security vulnerabilities:
Remotely exploitable denial of service vulnerability in Net-SNMP, in the Linux implementation of the ICMP-MIB, making the SNMP agent vulnerable if it is making use of the ICMP-MIB table objects (CVE-2014-2284).
Remotely exploitable denial of service vulnerability in Net-SNMP, in snmptrapd, due to how it handles trap requests with an empty community string when the perl handler is enabled (CVE-2014-2285).
- Record
MGASA-2014-0122- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10204-1 No score
libsnmp30-32bit-5.7.3-8.4 on GA media
These are all security issues fixed in the libsnmp30-32bit-5.7.3-8.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10204-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
net-snmpDebian:12 |
before 5.7.2.1~dfsg-3 | 5.7.2.1~dfsg-3 |
net-snmpDebian:13 |
before 5.7.2.1~dfsg-3 | 5.7.2.1~dfsg-3 |
net-snmpDebian:14 |
before 5.7.2.1~dfsg-3 | 5.7.2.1~dfsg-3 |
net-snmpMageia:3 From an advisory covering 2 CVEs |
before 5.7.2-7.2.mga3 | 5.7.2-7.2.mga3 |
net-snmpMageia:4 From an advisory covering 2 CVEs |
before 5.7.2-13.1.mga4 | 5.7.2-13.1.mga4 |
net-snmpRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-libsRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-develRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-perlRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
net-snmp-pythonRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-utilsRed Hat:enterprise_linux:6::client |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmpRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-libsRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-perlRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-pythonRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-utilsRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-develRed Hat:enterprise_linux:6::computenode |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmpRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-develRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-libsRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-perlRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-pythonRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-utilsRed Hat:enterprise_linux:6::server |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmpRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-develRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-libsRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-perlRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-pythonRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmp-utilsRed Hat:enterprise_linux:6::workstation |
before 1:5.5-49.el6_5.1 | 1:5.5-49.el6_5.1 |
net-snmpopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 5.7.3-8.4 | 5.7.3-8.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2284 is a medium vulnerability (CVSS 5.0) in Net-snmp, published March 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.98%, the 90th percentile. Fixed in net-snmp 5.7.2.1~dfsg-3.
References
lists.opensuse.org/opensuse-updates/2014-03/msg00060.html
secunia.com/advisories/57583
ubuntu.com/usn/USN-2166-1
Show 25 moreShow less
rhn.redhat.com/errata/RHSA-2014-0321.html
sourceforge.net/p/net-snmp/code/ci/a1fd64716f6794c55c34d77e618210238a73bfa1
gentoo.org/security/en/glsa/glsa-201409-02.xml
comments.gmane.org/gmane.comp.security.oss.general/12284
nvd.nist.gov/vuln/detail/CVE-2014-2284
github.com/advisories/GHSA-87fv-phj9-vf23
security-tracker.debian.org/tracker/CVE-2014-2284
advisories.mageia.org/MGASA-2014-0122.html
freecode.com/projects/net-snmp/releases/361848
openwall.com/lists/oss-security/2014/03/05/9
bugzilla.redhat.com/show_bug.cgi?id=1070396
bugs.mageia.org/show_bug.cgi?id=12880
access.redhat.com/errata/RHSA-2014:0321
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0321.json
cve.org/CVERecord?id=CVE-2014-2284
suse.com/security/cve/CVE-2012-2141