Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | May 18, 2008 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | May 18, 2008 |
| Oracle_linux | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-perl | Oct 16, 2024 | May 18, 2008 |
| Suse | — | Upgrade net-snmp-develUpgrade net-snmp-devel-64bitUpgrade libsnmp15Upgrade perl-SNMPUpgrade snmp-mibsUpgrade net-snmpUpgrade net-snmp-64bitUpgrade suse-releaseUpgrade net-snmp-32bit | Feb 17, 2015 | May 18, 2008 |
| Ubuntu | — | Upgrade libsnmp10Upgrade libsnmp9Upgrade libsnmp-perlUpgrade libsnmp15 | Nov 8, 2024 | May 18, 2008 |
| Vmsa 2008 0013 | — | Apply ESX350-200808405-SG. | Nov 19, 2010 | May 18, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub