Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-2292

Fixed in a distro release EPSS 8%

Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).

Published 2008-05-18 · CVE record · OSV

Products: net-snmp

Distro releases

ReleasePackageFixed in
Debian 12net-snmp5.4.1~dfsg-8
Debian 13net-snmp5.4.1~dfsg-8
Debian 14net-snmp5.4.1~dfsg-8
Debian 4.0net-snmp5.2.3-7etch4
Debian 5.0net-snmp5.4.1~dfsg-7+lenny1
Red Hat Enterprise Linux 3net-snmp0:5.0.9-2.30E.24
Red Hat Enterprise Linux 3net-snmp-debuginfo0:5.0.9-2.30E.24
Red Hat Enterprise Linux 3net-snmp-devel0:5.0.9-2.30E.24
Red Hat Enterprise Linux 3net-snmp-libs0:5.0.9-2.30E.24
Red Hat Enterprise Linux 3net-snmp-perl0:5.0.9-2.30E.24
Red Hat Enterprise Linux 3net-snmp-utils0:5.0.9-2.30E.24
Red Hat Enterprise Linux 4net-snmp0:5.1.2-11.el4_6.11.3
Red Hat Enterprise Linux 4net-snmp-debuginfo0:5.1.2-11.el4_6.11.3
Red Hat Enterprise Linux 4net-snmp-devel0:5.1.2-11.el4_6.11.3
Red Hat Enterprise Linux 4net-snmp-libs0:5.1.2-11.el4_6.11.3
Red Hat Enterprise Linux 4net-snmp-perl0:5.1.2-11.el4_6.11.3
Red Hat Enterprise Linux 4net-snmp-utils0:5.1.2-11.el4_6.11.3
Red Hat Enterprise Linux 5net-snmp1:5.3.1-24.el5_2.1
Red Hat Enterprise Linux 5net-snmp-debuginfo1:5.3.1-24.el5_2.1
Red Hat Enterprise Linux 5net-snmp-devel1:5.3.1-24.el5_2.1
Red Hat Enterprise Linux 5net-snmp-libs1:5.3.1-24.el5_2.1
Red Hat Enterprise Linux 5net-snmp-perl1:5.3.1-24.el5_2.1
Red Hat Enterprise Linux 5net-snmp-utils1:5.3.1-24.el5_2.1
Red Hat rhel eus 4.5net-snmp0:5.1.2-11.el4_6.11.3
Red Hat rhel eus 4.5net-snmp-debuginfo0:5.1.2-11.el4_6.11.3
Red Hat rhel eus 4.5net-snmp-devel0:5.1.2-11.el4_6.11.3
Red Hat rhel eus 4.5net-snmp-libs0:5.1.2-11.el4_6.11.3
Red Hat rhel eus 4.5net-snmp-perl0:5.1.2-11.el4_6.11.3
Red Hat rhel eus 4.5net-snmp-utils0:5.1.2-11.el4_6.11.3