SNMPNG32: zenSnmpTrapSrv crashes when communicating with many SNMP agents

SNMPNG32: zenSnmpTrapSrv crashes when communicating with many SNMP agents

Summary

When a certain amount of SNMP agents (~60) is reached, a stack corruption occurrs inside the used NetSNMP library during polling the agents. This bug of the library was already fixed by the issuer of the library. The library has been updated in 8.10 and 8.20 which fixes the crash. As the new version of the NetSNMP library requires a higher openSSL version, the updated library cannot be merged to 8.00 as this version uses an older openSSL library and the change risk of updating openSSL in 8.00 is way too high.

Additionally, all agents that do not require polling (all SNMPv1 agents, all SNMPv2c agents and SNMPv3 agents that neither use authentication nor encryption) are excluded from polling inside the zenSnmpTrapSrv. This has been merged to 8.10 and 8.00. This avoids not needed network traffic and also avoids the crash in 8.00.

So, the crash will still occur in 8.00 when using more than 60 SNMPv3 agents that use authentication and/or encryption. In this case, an update to 8.10 is needed.

Description

When a certain amount of SNMP agents (~60) is reached, a stack corruption occurrs inside the used NetSNMP library during polling the agents. This bug of the library was already fixed by the issuer of the library. The library has been updated in 8.10 and 8.20 which fixes the crash. As the new version of the NetSNMP library requires a higher openSSL version, the updated library cannot be merged to 8.00 as this version uses an older openSSL library and the change risk of updating openSSL in 8.00 is way too high.

Additionally, all agents that do not require polling (all SNMPv1 agents, all SNMPv2c agents and SNMPv3 agents that neither use authentication nor encryption) are excluded from polling inside the zenSnmpTrapSrv. This has been merged to 8.10 and 8.00. This avoids not needed network traffic and also avoids the crash in 8.00.

So, the crash will still occur in 8.00 when using more than 60 SNMPv3 agents that use authentication and/or encryption. In this case, an update to 8.10 is needed.

Information

Do not use more than 60 SNMP agents



Issue Number: 203333
Fixed on Date: 4.12.2019
Versions: 8.00 0 BUILD 62925 | 8.10 0 BUILD 63141