Unscored severity · published Aug 14, 2012
CVE-2012-2141
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Net-snmp · Net-snmp
5.7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2141
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2141
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0124.html
Vendor Advisory
http://secunia.com/advisories/48938
secunia.com
http://secunia.com/advisories/59974
support.citrix.com
http://support.citrix.com/article/CTX139049
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/04/26/2
More from Net-snmp
9.8
CVE-2025-68615
net-snmp is a SNMP application library, tools and daemon
9.8
CVE-2018-1000116
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution
8.8
CVE-2022-24810
net-snmp provides various tools relating to the Simple Network Management Protocol
8.8
CVE-2022-24805
net-snmp provides various tools relating to the Simple Network Management Protocol
7.8
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root