Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-python | Dec 1, 2016 | Aug 14, 2012 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Aug 14, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 30, 2015 |
| Freebsd | — | Upgrade net-snmp | Dec 10, 2025 | Apr 27, 2012 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Aug 14, 2012 |
| Oracle Solaris | — | Upgrade runtime/python-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-27 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python/tkinter-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-26 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27/tests to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-26 to version 2.6.8-0.175.2.5.0.1.0 on Solaris 11.2 | May 29, 2017 | Aug 14, 2012 |
| Oracle_linux | — | Upgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-pythonUpgrade net-snmpUpgrade net-snmp-utils | Oct 16, 2024 | Aug 14, 2012 |
| Suse | — | Upgrade net-snmp-devel-32bitUpgrade libsnmp30-32bitUpgrade libsnmp40Upgrade net-snmp-develUpgrade libsnmp30Upgrade libsnmp15Upgrade libsnmp15-x86Upgrade perl-SNMPUpgrade libsnmp15-32bitUpgrade snmp-mibsUpgrade libsnmp15-openssl1-32bitUpgrade python313-net-snmpUpgrade net-snmpUpgrade libsnmp15-openssl1 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsnmp15 | Nov 8, 2024 | Aug 14, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub