The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmpUpgrade net-snmp-perl | Dec 1, 2016 | Apr 27, 2014 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Apr 27, 2014 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Apr 27, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-agent-libs | Jun 17, 2020 | Apr 27, 2014 |
| Oracle Solaris | — | Upgrade runtime/python-27/tests to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-27 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python/tkinter-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-26 to version 2.6.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-26 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2 | May 29, 2017 | Apr 27, 2014 |
| Oracle_linux | — | Upgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade net-snmp-libsUpgrade net-snmp-devel | Oct 16, 2024 | Apr 27, 2014 |
| Suse | — | Upgrade libsnmp15-32bitUpgrade perl-SNMPUpgrade net-snmp-develUpgrade libsnmp15-openssl1-32bitUpgrade net-snmpUpgrade libsnmp30-32bitUpgrade net-snmp-devel-32bitUpgrade libsnmp30Upgrade snmp-mibsUpgrade libsnmp15-x86Upgrade libsnmp15Upgrade libsnmp15-openssl1 | Dec 18, 2015 | Mar 19, 2014 |
| Ubuntu | — | Upgrade libsnmp30Upgrade libsnmp15 | Nov 8, 2024 | Apr 27, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub