Re: pkg/49860: DoS against snmpd on netbsd routers

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

The following reply was made to PR pkg/49860; it has been noted by GNATS.

From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/49860: DoS against snmpd on netbsd routers
Date: Sun, 26 Apr 2015 20:19:42 +0200

 On Sun, Apr 26, 2015 at 04:20:00PM +0000, 6bone%6bone.informatik.uni-leipzig.de@localhost wrote:
 > IPv6 routers allow remote attackers to make the snmpd (net-snmp-5.7.3)
 > stop work permanently. The snmpd then uses 100% CPU and does not
 > respond to requests.
 
 Can you ktrace it to see what it is doing? Does sockstat work fine? The
 problem with net-snmp is that it is extremely messy code and quite a few
 things are using kmem when they don't have to, so it is easy to hit race
 conditions and the like.
 
 Joerg