NE
Product
Net-SNMP
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 8Low 0
Watch
Add Net-SNMP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68615 | 9.8 | Dec 23 | net-snmp is a SNMP application library, tools and daemon Affected: before 5.9.5; 5.10 |
| CVE-2018-1000116 | 9.8 | Mar 7 | NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution Affected: 5.7.2 |
| CVE-2022-24810 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: before 5.9.2 |
| CVE-2022-24805 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: before 5.9.2 |
| CVE-2020-15862 | 7.8 | Aug 20 | Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root Affected: before 5.8.1 |
| CVE-2020-15861 | 7.8 | Aug 20 | Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following Affected: through 5.7.3 |
| CVE-2026-89147 | 7.5 | Sep 11 | Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read Affected: through 5.9.5.2 |
| CVE-2018-18066 | 7.5 | Oct 8 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to… Affected: before 5.8 |
| CVE-2015-5621 | 7.5 | Aug 19 | The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails,… Affected: through 5.7.2 |
| CVE-2008-4309 | 7.5 | Oct 31 | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote… Affected: 5.2.5; 5.3.2.2; 5.4 |
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: before 5.9.2 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: before 5.9.2 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: before 5.9.2 |
| CVE-2022-44793 | 6.5 | Nov 7 | handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the… Affected: 5.4.3 through 5.9.3 |
| CVE-2022-44792 | 6.5 | Nov 7 | handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write… Affected: 5.8 through 5.9.3 |
| CVE-2019-20892 | 6.5 | Jun 25 | net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request Affected: through 5.8 |
| CVE-2018-18065 | 6.5 | Oct 8 | _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to… Affected: before 5.8 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: before 5.9.2 |
| CVE-2015-8100 | – | Nov 10 | The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file Affected: through 5.8 |
| CVE-2014-3565 | – | Oct 7 | snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message,… Affected: through 5.7.0; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +13 more |
| CVE-2014-2285 | – | Apr 27 | The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a… Affected: through 5.7.3 |
| CVE-2014-2310 | – | Apr 17 | The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more… Affected: through 5.4 |
| CVE-2014-2284 | – | Mar 24 | The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote… Affected: 5.5; 5.5.0.1; 5.5.0.2; 5.5.1; 5.5.1.1; 5.5.2; +6 more |
| CVE-2012-6151 | – | Dec 13 | Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite… Affected: through 5.7.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +14 more |
| CVE-2012-2141 | – | Aug 14 | Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service… Affected: 5.7.1 |
| CVE-2009-1887 | – | Jun 26 | agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK… Affected: 5.0.9 |
| CVE-2008-6123 | – | Feb 12 | The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow… Affected: 5.0.9 through 5.4.2.1 |
| CVE-2008-2292 | – | May 18 | Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service… Affected: 5.1.4; 5.2.4; 5.4.1 |
| CVE-2007-5846 | – | Nov 6 | The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large… Affected: through 5.4.1 |
| CVE-2006-6305 | – | Dec 6 | Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP to grant write access to users or… Affected: 5.3 |
| CVE-2005-4837 | – | Dec 31 | snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4_pre2; 5.0.5; +5 more |
| CVE-2005-2811 | – | Sep 7 | Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to… Affected: through 5.2.1.2_r1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4_pre2; +10 more |
| CVE-2005-2177 | – | Jul 11 | Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4_pre2; 5.0.5; +8 more |
| CVE-2005-1740 | – | May 24 | fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or… Affected: 5.0.1; 5.0.3; 5.0.4_pre2; 5.0.5; 5.0.6; 5.0.7; +3 more |
| CVE-2003-0935 | – | Dec 1 | Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed Affected: 5.0.1; 5.0.3; 5.0.4_pre2; 5.0.5; 5.0.6; 5.0.7; +1 more |
| CVE-2002-1170 | – | Oct 11 | The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of… Affected: 5.0.1; 5.0.3; 5.0.4_pre2 |
Showing 36