snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade net-snmp | Aug 30, 2017 | Oct 7, 2014 |
| Apple Osx Accelerateframework | — | Apply OS X security update 2015-007Upgrade macOS to the latest version | Oct 22, 2015 | Oct 7, 2014 |
| Apple Osx Netsnmp | — | Upgrade macOS to the latest version | Mar 29, 2016 | Oct 7, 2014 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Oct 7, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 29, 2015 |
| Freebsd | — | Upgrade net-snmp | Dec 10, 2025 | Jul 31, 2015 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Oct 7, 2014 |
| Oracle Solaris | — | Upgrade runtime/python-26 to version 2.6.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-26 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-27 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27/tests to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python/tkinter-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2 | May 29, 2017 | Oct 7, 2014 |
| Oracle_linux | — | — | Oct 16, 2024 | Oct 7, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 31, 2014 |
| Suse | — | Upgrade libsnmp30-32bitUpgrade perl-SNMPUpgrade net-snmp-develUpgrade libsnmp15Upgrade libsnmp15-x86Upgrade libsnmp30Upgrade net-snmp-devel-32bitUpgrade snmp-mibsUpgrade net-snmpUpgrade libsnmp15-openssl1-32bitUpgrade libsnmp15-openssl1Upgrade libsnmp15-32bit | Dec 18, 2015 | Sep 9, 2014 |
| Ubuntu | — | Upgrade libsnmp30Upgrade libsnmp15 | Nov 8, 2024 | Oct 7, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub