Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | May 18, 2008 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Oct 30, 2017 | May 18, 2008 |
| Oracle_linux | — | Upgrade net-snmpUpgrade net-snmp-utilsUpgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmp-libs | Oct 16, 2024 | May 18, 2008 |
| Suse | — | Upgrade snmp-mibsUpgrade libsnmp15Upgrade net-snmp-develUpgrade perl-SNMPUpgrade net-snmp-devel-64bitUpgrade suse-releaseUpgrade net-snmp-32bitUpgrade net-snmpUpgrade net-snmp-64bit | Feb 17, 2015 | May 18, 2008 |
| Ubuntu | — | Upgrade libsnmp-perlUpgrade libsnmp15Upgrade libsnmp10Upgrade libsnmp9 | Nov 8, 2024 | May 18, 2008 |
| Vmsa 2008 0013 | — | Apply ESX350-200808405-SG. | Nov 19, 2010 | May 18, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub