The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-perl | Dec 1, 2016 | Apr 27, 2014 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Apr 27, 2014 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | Apr 27, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmp | Jun 17, 2020 | Apr 27, 2014 |
| Oracle Solaris | — | Upgrade library/python-2/net-snmp-26 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python/tkinter-27 to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade library/python-2/net-snmp-27 to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-26 to version 2.6.8-0.175.2.5.0.1.0 on Solaris 11.2Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.2.5.0.1.0 on Solaris 11.2Upgrade runtime/python-27/tests to version 2.7.8-0.175.2.5.0.1.0 on Solaris 11.2 | May 29, 2017 | Apr 27, 2014 |
| Oracle_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmpUpgrade net-snmp-utils | Oct 16, 2024 | Apr 27, 2014 |
| Suse | — | Upgrade libsnmp15Upgrade snmp-mibsUpgrade libsnmp30Upgrade libsnmp15-x86Upgrade net-snmp-devel-32bitUpgrade libsnmp30-32bitUpgrade libsnmp15-openssl1Upgrade net-snmp-develUpgrade libsnmp15-openssl1-32bitUpgrade perl-SNMPUpgrade net-snmpUpgrade libsnmp15-32bit | Dec 18, 2015 | Mar 19, 2014 |
| Ubuntu | — | Upgrade libsnmp15Upgrade libsnmp30 | Nov 8, 2024 | Apr 27, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub