CVE Catalog

CVE-1999-1581

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
20.64%

97th percentile - higher than 97% of all known CVEs

Summary

A memory leak in the SNMP protocol on Windows NT 4.0 before Service Pack 4 can be exploited by remote attackers. Attackers can cause a denial of service by sending a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.

Risk Assessment

The memory leak can lead to resource exhaustion, resulting in denial of service. Organizations may experience downtime in their network management systems.

Recommendation

It is recommended to update the system to the latest version with security patches and to monitor SNMP traffic for detecting and blocking suspicious packets.

Original NVD description (English source)

Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS