net-snmp records
36 published records for vendor net-snmp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 94.4%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-476 NULL Pointer Dereference7
- CWE-20 Improper Input Validation6
- CWE-399 Resource Management Errors3
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-287 Improper Authentication1
The weakness classes this vendor ships most often: where to look.
CWEAll records
36 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
61This week | CVE-2008-0960Proof of concept | SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Jnet-snmp · net snmp · CWE-287 | Critical10.0 | — | 68.7% | Jun 10, 2008 |
52Plan | CVE-2025-68615No exploit | Net-SNMP snmptrapd crashnet-snmp · net-snmp · CWE-119 | Critical9.8 | — | 42.3% | Dec 23, 2025 |
43Plan | CVE-2005-4837No exploit | snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allownet-snmp · net-snmp · CWE-16 | Critical10.0 | — | 10.0% | Dec 31, 2005 |
43Plan | CVE-2005-1740No exploit | fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files tnet-snmp · net-snmp | Critical10.0 | — | 8.6% | May 24, 2005 |
42Plan | CVE-2022-44793No exploit | handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be unet-snmp · net-snmp · CWE-476 | Medium6.5 | — | 53.4% | Nov 6, 2022 |
42Plan | CVE-2022-44792No exploit | handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used bynet-snmp · net-snmp · CWE-476 | Medium6.5 | — | 52.0% | Nov 6, 2022 |
41Plan | CVE-2015-5621Proof of concept | The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list itemnet-snmp · net-snmp · CWE-19 | High7.5 | — | 38.3% | Aug 19, 2015 |
41Plan | CVE-2018-1000116No exploit | NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.net-snmp · net-snmp · CWE-787 | Critical9.8 | — | 6.2% | Mar 7, 2018 |
40Plan | CVE-2007-5846No exploit | The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) vianet-snmp · net-snmp · CWE-399 | High7.8 | — | 29.1% | Nov 6, 2007 |
35Monitor | CVE-2022-24805No exploit | net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.net-snmp · net-snmp · CWE-120 | High8.8 | — | 1.2% | Apr 16, 2024 |
35Monitor | CVE-2022-24810No exploit | net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.net-snmp · net-snmp · CWE-476 | High8.8 | — | 1.1% | Apr 16, 2024 |
32Monitor | CVE-2008-4309No exploit | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and net-snmp · net-snmp · CWE-20 | High7.5 | — | 5.0% | Oct 31, 2008 |
31Monitor | CVE-2018-18065Proof of concept | _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attnet-snmp · net-snmp · CWE-476 | Medium6.5 | — | 17.5% | Oct 8, 2018 |
31Monitor | CVE-2018-18066No exploit | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacknet-snmp · net-snmp · CWE-476 | High7.5 | — | 3.5% | Oct 8, 2018 |
31Monitor | CVE-2006-6305No exploit | Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMPnet-snmp · net-snmp | High7.5 | — | 2.0% | Dec 6, 2006 |
31Monitor | CVE-2020-15861No exploit | Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.net-snmp · net-snmp · CWE-59 | High7.8 | — | 0.4% | Aug 19, 2020 |
31Monitor | CVE-2020-15862No exploit | Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary comnet-snmp · net-snmp · CWE-269 | High7.8 | — | 0.3% | Aug 19, 2020 |
30Monitor | CVE-2008-2292Proof of concept | Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote net-snmp · net-snmp · CWE-119 | Medium6.8 | — | 8.4% | May 18, 2008 |
27Monitor | CVE-2019-20892No exploit | net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request.net-snmp · net-snmp · CWE-415 | Medium6.5 | — | 2.3% | Jun 25, 2020 |
26Monitor | CVE-2022-24808No exploit | net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferencenet-snmp · net-snmp · CWE-476 | Medium6.5 | — | 1.1% | Apr 16, 2024 |
26Monitor | CVE-2022-24809No exploit | net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferencenet-snmp · net-snmp · CWE-476 | Medium6.5 | — | 1.1% | Apr 16, 2024 |
26Monitor | CVE-2022-24807No exploit | net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory accessnet-snmp · net-snmp · CWE-120 | Medium6.5 | — | 1.0% | Apr 16, 2024 |
25Monitor | CVE-2003-0935No exploit | Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.net-snmp · net-snmp | Medium6.4 | — | 1.5% | Dec 1, 2003 |
21Monitor | CVE-2014-3565No exploit | snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crnet-snmp · net-snmp · CWE-399 | Medium5.0 | — | 4.4% | Oct 7, 2014 |
21Monitor | CVE-2014-2284No exploit | The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly vanet-snmp · net-snmp · CWE-20 | Medium5.0 | — | 3.9% | Mar 24, 2014 |
- CVE-2008-096061This week
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) J
CriticalCVSS 10.0Proof of conceptEPSS 68%net-snmp · net snmpJun 10, 2008
- CVE-2025-6861552Plan
Net-SNMP snmptrapd crash
CriticalCVSS 9.8No exploitEPSS 42%net-snmp · net-snmpDec 23, 2025
- CVE-2005-483743Plan
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allow
CriticalCVSS 10.0No exploitEPSS 10%net-snmp · net-snmpDec 31, 2005
- CVE-2005-174043Plan
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files t
CriticalCVSS 10.0No exploitEPSS 8%net-snmp · net-snmpMay 24, 2005
- CVE-2022-4479342Plan
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be u
MediumCVSS 6.5No exploitEPSS 53%net-snmp · net-snmpNov 6, 2022
- CVE-2022-4479242Plan
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by
MediumCVSS 6.5No exploitEPSS 52%net-snmp · net-snmpNov 6, 2022
- CVE-2015-562141Plan
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item
HighCVSS 7.5Proof of conceptEPSS 38%net-snmp · net-snmpAug 19, 2015
- CVE-2018-100011641Plan
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.
CriticalCVSS 9.8No exploitEPSS 6%net-snmp · net-snmpMar 7, 2018
- CVE-2007-584640Plan
The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via
HighCVSS 7.8No exploitEPSS 29%net-snmp · net-snmpNov 6, 2007
- CVE-2022-2480535Monitor
net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
HighCVSS 8.8No exploitEPSS 1%net-snmp · net-snmpApr 16, 2024
- CVE-2022-2481035Monitor
net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
HighCVSS 8.8No exploitEPSS 1%net-snmp · net-snmpApr 16, 2024
- CVE-2008-430932Monitor
Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and
HighCVSS 7.5No exploitEPSS 5%net-snmp · net-snmpOct 31, 2008
- CVE-2018-1806531Monitor
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated att
MediumCVSS 6.5Proof of conceptEPSS 17%net-snmp · net-snmpOct 8, 2018
- CVE-2018-1806631Monitor
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attack
HighCVSS 7.5No exploitEPSS 3%net-snmp · net-snmpOct 8, 2018
- CVE-2006-630531Monitor
Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP
HighCVSS 7.5No exploitEPSS 2%net-snmp · net-snmpDec 6, 2006
- CVE-2020-1586131Monitor
Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.
HighCVSS 7.8No exploitEPSS 0%net-snmp · net-snmpAug 19, 2020
- CVE-2020-1586231Monitor
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary com
HighCVSS 7.8No exploitEPSS 0%net-snmp · net-snmpAug 19, 2020
- CVE-2008-229230Monitor
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote
MediumCVSS 6.8Proof of conceptEPSS 8%net-snmp · net-snmpMay 18, 2008
- CVE-2019-2089227Monitor
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request.
MediumCVSS 6.5No exploitEPSS 2%net-snmp · net-snmpJun 25, 2020
- CVE-2022-2480826Monitor
net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
MediumCVSS 6.5No exploitEPSS 1%net-snmp · net-snmpApr 16, 2024
- CVE-2022-2480926Monitor
net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
MediumCVSS 6.5No exploitEPSS 1%net-snmp · net-snmpApr 16, 2024
- CVE-2022-2480726Monitor
net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access
MediumCVSS 6.5No exploitEPSS 1%net-snmp · net-snmpApr 16, 2024
- CVE-2003-093525Monitor
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.
MediumCVSS 6.4No exploitEPSS 1%net-snmp · net-snmpDec 1, 2003
- CVE-2014-356521Monitor
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd cr
MediumCVSS 5.0No exploitEPSS 4%net-snmp · net-snmpOct 7, 2014
- CVE-2014-228421Monitor
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly va
MediumCVSS 5.0No exploitEPSS 3%net-snmp · net-snmpMar 24, 2014