CVE-2015-5621
HighSummary
The snmp_pdu_parse function in net-snmp version 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails. This allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
Risk Assessment
The organization may be exposed to attacks that lead to system crashes and potential execution of malicious code, which could result in data loss or security breaches.
Recommendation
It is recommended to upgrade to the latest version of net-snmp to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Other vulnerabilities in net-snmp
See all- CVE-2008-4309High
Heap buffer overflow in the netsnmp_create_subtree_cache function in net-snmp before version 5.4.2.1, 5.3.2.3, and 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request.
- CVE-2026-89147High
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.
Original NVD description (English source)
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS