Vulnerabilities

Filters

2 selected

35 records

Sort

Vendor: net-snmp Component: Net-snmp Clear all filters

TI-2025-42133 CVE-2025-68615

Net-SNMP snmptrapd crash

HIGH 77

net-snmp is a SNMP application library, tools and daemon.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4236 Published 2025-12-22 Partial fix · 5.9.5, 5.10.pre2 CWE-119

TI-2022-08623 CVE-2022-24810

net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.

MEDIUM 40

net-snmp provides various tools relating to the Simple Network Management Protocol.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01156 Published 2024-04-16 Partial fix · 5.9.2 CWE-476

TI-2022-08622 CVE-2022-24809

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

LOW 31

net-snmp provides various tools relating to the Simple Network Management Protocol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01114 Published 2024-04-16 Partial fix · 5.9.2 CWE-476

TI-2022-08621 CVE-2022-24808

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

LOW 31

net-snmp provides various tools relating to the Simple Network Management Protocol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01141 Published 2024-04-16 Partial fix · 5.9.2 CWE-476

TI-2022-08620 CVE-2022-24807

Buffer overflow in net-snmp

LOW 31

net-snmp provides various tools relating to the Simple Network Management Protocol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01016 Published 2024-04-16 Partial fix · 5.9.2 CWE-120

TI-2022-08619 CVE-2022-24806

net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

LOW 31

net-snmp provides various tools relating to the Simple Network Management Protocol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01061 Published 2024-04-16 Partial fix · 5.9.2 CWE-20

TI-2022-08618 CVE-2022-24805

net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

MEDIUM 41

net-snmp provides various tools relating to the Simple Network Management Protocol.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01299 Published 2024-04-16 Partial fix · 5.9.2 CWE-120

TI-2022-22058 CVE-2022-44793 · GHSA-gg4c-vq6j-h4hr

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through…

MEDIUM 62

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.5346 Published 2022-11-07 Partial fix CWE-476

TI-2022-22057 CVE-2022-44792 · GHSA-pccv-xjc7-m5qv

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3…

MEDIUM 62

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a c…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.52054 Published 2022-11-07 Fixed CWE-476

TI-2020-12481 CVE-2020-15861 · GHSA-mfrp-422x-34qv

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

LOW 36

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00455 Published 2020-08-19 No fix listed CWE-59

TI-2020-12482 CVE-2020-15862 · GHSA-wfc4-c3m6-rrjc

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the…

LOW 34

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00379 Published 2020-08-19 Partial fix CWE-269

TI-2019-15110 CVE-2019-20892 · GHSA-8q2p-wr8q-hv7c

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in…

LOW 33

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02315 Published 2020-06-25 Fixed CWE-415

TI-2018-12840 CVE-2018-18066 · GHSA-9mpr-24m6-767p

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer…

HIGH 72

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting i…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0359 Published 2018-10-08 Partial fix CWE-476

TI-2018-12839 CVE-2018-18065 · GHSA-j2x7-g8jc-3475

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer…

MEDIUM 46

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resultin…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.17504 Published 2018-10-08 No fix listed CWE-476

TI-2018-15769 CVE-2018-1000116 · GHSA-8q7v-xf4g-8vpc

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol…

MEDIUM 51

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06291 Published 2018-03-07 Partial fix CWE-787

TI-2015-06739 CVE-2015-8100 · GHSA-88wg-39x8-pwf8

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which…

LOW 12

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00545 Published 2015-11-10 No fix listed CWE-200

TI-2015-04735 CVE-2015-5621 · GHSA-w7cc-jv4p-qccr

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove…

HIGH 72

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a de…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.38322 Published 2015-08-19 Fixed CWE-190

TI-2014-02889 CVE-2014-3565 · GHSA-w26p-786m-5h86

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote…

LOW 30

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variabl…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04439 Published 2014-10-07 Partial fix CWE-399

TI-2014-01812 CVE-2014-2285 · GHSA-vjgw-84x2-wchq

The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP…

LOW 26

The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an emp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03298 Published 2014-04-27 Fixed CWE-20

TI-2014-01829 CVE-2014-2310 · GHSA-7x87-wr85-45rj

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of…

LOW 27

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a differen…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01992 Published 2014-04-17 No fix listed CWE-20

TI-2014-01811 CVE-2014-2284 · GHSA-87fv-phj9-vf23

The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before…

LOW 30

The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via uns…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03979 Published 2014-03-24 Fixed CWE-20

TI-2012-05112 CVE-2012-6151 · GHSA-mv75-h3qp-gpmf

Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing…

LOW 32

Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.09451 Published 2013-12-13 Fixed CWE-399

TI-2012-01914 CVE-2012-2141 · GHSA-qx3h-g3gw-6vrx

Array index error in the handle_nsExtendOutput2Table function in…

LOW 21

Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02167 Published 2012-08-14 Fixed

TI-2009-01798 CVE-2009-1887 · GHSA-cf72-rgjq-hh5r

agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows…

LOW 27

agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero err…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02214 Published 2009-06-26 Fixed CWE-369

TI-2008-05817 CVE-2008-6123 · GHSA-85rg-g6cg-264m

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through…

LOW 28

The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02896 Published 2009-02-12 Fixed CWE-863