Skip to content
Noroxi

net-snmp records

36 published records for vendor net-snmp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
94.4%
Median publish → KEV
No record has entered KEV

All records

36 records
  • CVE-2008-0960
    61This week

    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) J

    CriticalCVSS 10.0Proof of conceptEPSS 68%

    net-snmp · net snmpJun 10, 2008

  • Net-SNMP snmptrapd crash

    CriticalCVSS 9.8No exploitEPSS 42%

    net-snmp · net-snmpDec 23, 2025

  • snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allow

    CriticalCVSS 10.0No exploitEPSS 10%

    net-snmp · net-snmpDec 31, 2005

  • fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files t

    CriticalCVSS 10.0No exploitEPSS 8%

    net-snmp · net-snmpMay 24, 2005

  • handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be u

    MediumCVSS 6.5No exploitEPSS 53%

    net-snmp · net-snmpNov 6, 2022

  • handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by

    MediumCVSS 6.5No exploitEPSS 52%

    net-snmp · net-snmpNov 6, 2022

  • The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item

    HighCVSS 7.5Proof of conceptEPSS 38%

    net-snmp · net-snmpAug 19, 2015

  • NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.

    CriticalCVSS 9.8No exploitEPSS 6%

    net-snmp · net-snmpMar 7, 2018

  • The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via

    HighCVSS 7.8No exploitEPSS 29%

    net-snmp · net-snmpNov 6, 2007

  • net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

    HighCVSS 8.8No exploitEPSS 1%

    net-snmp · net-snmpApr 16, 2024

  • net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.

    HighCVSS 8.8No exploitEPSS 1%

    net-snmp · net-snmpApr 16, 2024

  • CVE-2008-4309
    32Monitor

    Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and

    HighCVSS 7.5No exploitEPSS 5%

    net-snmp · net-snmpOct 31, 2008

  • _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated att

    MediumCVSS 6.5Proof of conceptEPSS 17%

    net-snmp · net-snmpOct 8, 2018

  • snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attack

    HighCVSS 7.5No exploitEPSS 3%

    net-snmp · net-snmpOct 8, 2018

  • CVE-2006-6305
    31Monitor

    Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP

    HighCVSS 7.5No exploitEPSS 2%

    net-snmp · net-snmpDec 6, 2006

  • Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

    HighCVSS 7.8No exploitEPSS 0%

    net-snmp · net-snmpAug 19, 2020

  • Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary com

    HighCVSS 7.8No exploitEPSS 0%

    net-snmp · net-snmpAug 19, 2020

  • CVE-2008-2292
    30Monitor

    Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote

    MediumCVSS 6.8Proof of conceptEPSS 8%

    net-snmp · net-snmpMay 18, 2008

  • net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request.

    MediumCVSS 6.5No exploitEPSS 2%

    net-snmp · net-snmpJun 25, 2020

  • net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

    MediumCVSS 6.5No exploitEPSS 1%

    net-snmp · net-snmpApr 16, 2024

  • net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

    MediumCVSS 6.5No exploitEPSS 1%

    net-snmp · net-snmpApr 16, 2024

  • net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

    MediumCVSS 6.5No exploitEPSS 1%

    net-snmp · net-snmpApr 16, 2024

  • CVE-2003-0935
    25Monitor

    Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.

    MediumCVSS 6.4No exploitEPSS 1%

    net-snmp · net-snmpDec 1, 2003

  • CVE-2014-3565
    21Monitor

    snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd cr

    MediumCVSS 5.0No exploitEPSS 4%

    net-snmp · net-snmpOct 7, 2014

  • CVE-2014-2284
    21Monitor

    The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly va

    MediumCVSS 5.0No exploitEPSS 3%

    net-snmp · net-snmpMar 24, 2014