SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Netsnmp | — | Upgrade macOS to the latest versionApply OS X security update 2008-004 | Dec 16, 2011 | Jun 10, 2008 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Jun 10, 2008 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 19, 2013 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Jun 10, 2008 |
| Oracle_linux | — | Upgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-perlUpgrade net-snmp-utils | Oct 16, 2024 | Jun 10, 2008 |
| Suse | — | Upgrade net-snmp-devel-64bitUpgrade net-snmp-develUpgrade libsnmp15Upgrade snmp-mibsUpgrade perl-SNMPUpgrade net-snmp-32bitUpgrade suse-releaseUpgrade net-snmpUpgrade net-snmp-64bit | Feb 17, 2015 | Jun 10, 2008 |
| Ubuntu | — | Upgrade libsnmp10Upgrade libsnmp15Upgrade libsnmp9Upgrade libsnmp-perl | Nov 8, 2024 | Jun 10, 2008 |
| Vmsa 2008 0013 | — | Apply ESX350-200808405-SG. | Nov 19, 2010 | Jun 10, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub