The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade net-snmp | Aug 30, 2017 | Aug 19, 2015 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 19, 2015 |
| Centos_linux | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-guiUpgrade net-snmp-libsUpgrade net-snmp-sysvinitUpgrade net-snmp-perlUpgrade net-snmp-utilsUpgrade net-snmp-pythonUpgrade net-snmpUpgrade net-snmp-devel | Dec 1, 2016 | Aug 19, 2015 |
| Debian | — | Upgrade net-snmp | Mar 29, 2018 | Aug 19, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 8, 2015 |
| Freebsd | — | Upgrade net-snmp | Dec 10, 2025 | Jul 31, 2015 |
| Oracle Solaris | — | Upgrade library/python/net-snmp-26 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/documentation to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade library/python/net-snmp-27 to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp/addons to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3Upgrade system/management/snmp/net-snmp to version 5.4.1-0.175.3.14.0.1.0 on Solaris 11.3 | May 29, 2017 | Aug 19, 2015 |
| Oracle_linux | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-guiUpgrade net-snmp-pythonUpgrade net-snmp-perlUpgrade net-snmp-develUpgrade net-snmp-sysvinit | Oct 16, 2024 | Aug 19, 2015 |
| Suse | — | Upgrade libsnmp15-openssl1-32bitUpgrade snmp-mibsUpgrade libsnmp15Upgrade net-snmp-develUpgrade libsnmp15-x86Upgrade libsnmp30Upgrade libsnmp15-32bitUpgrade libsnmp30-32bitUpgrade libsnmp15-openssl1Upgrade net-snmp-devel-32bitUpgrade net-snmpUpgrade perl-SNMP | Dec 18, 2015 | Aug 19, 2015 |
| Ubuntu | — | Upgrade libsnmp30Upgrade libsnmp15 | Nov 8, 2024 | Aug 19, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub