The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Nov 6, 2007 |
| Freebsd | — | Upgrade net-snmp | Dec 10, 2025 | Nov 13, 2007 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Nov 6, 2007 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R14Update Pulse Connect Secure to version 8.3R5Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 9.0R1 | Oct 28, 2020 | Nov 6, 2007 |
| Suse | — | Upgrade net-snmp-devel-64bitUpgrade net-snmpUpgrade perl-SNMPUpgrade net-snmp-32bitUpgrade suse-releaseUpgrade net-snmp-64bitUpgrade net-snmp-devel | Feb 17, 2015 | Nov 6, 2007 |
| Ubuntu | — | Upgrade snmpd | Nov 8, 2024 | Nov 6, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub