Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-pythonUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade net-snmp-devel | Dec 1, 2016 | Aug 14, 2012 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Aug 14, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 30, 2015 |
| Freebsd | — | Upgrade net-snmp | Dec 10, 2025 | Apr 27, 2012 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Aug 14, 2012 |
| Oracle Solaris | — | Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27/tests to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-26 to version 2.6.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-27 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-26 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python/tkinter-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2 | May 29, 2017 | Aug 14, 2012 |
| Oracle_linux | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-pythonUpgrade net-snmp-develUpgrade net-snmp-perl | Oct 16, 2024 | Aug 14, 2012 |
| Suse | — | Upgrade libsnmp15-32bitUpgrade libsnmp15-openssl1Upgrade python313-net-snmpUpgrade libsnmp15-openssl1-32bitUpgrade snmp-mibsUpgrade net-snmpUpgrade net-snmp-devel-32bitUpgrade net-snmp-develUpgrade libsnmp15-x86Upgrade perl-SNMPUpgrade libsnmp30Upgrade libsnmp40Upgrade libsnmp30-32bitUpgrade libsnmp15 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsnmp15 | Nov 8, 2024 | Aug 14, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub