CVE-2015-5621
Fixed in a distro release EPSS 38%CVSS 7.5
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
Products: net-snmp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | net-snmp | 5.8-1 |
| Debian 12 | net-snmp | 5.7.3+dfsg-1.1 |
| Debian 13 | net-snmp | 5.7.3+dfsg-1.1 |
| Debian 14 | net-snmp | 5.7.3+dfsg-1.1 |
| Debian 7 | net-snmp | 5.4.3~dfsg-2.8+deb7u2 |
| Debian 8 | net-snmp | 5.7.2.1+dfsg-1+deb8u1 |
| Red Hat Enterprise Linux 6 | net-snmp | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 6 | net-snmp-debuginfo | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 6 | net-snmp-devel | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 6 | net-snmp-libs | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 6 | net-snmp-perl | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 6 | net-snmp-python | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 6 | net-snmp-utils | 1:5.5-54.el6_7.1 |
| Red Hat Enterprise Linux 7 | net-snmp | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-agent-libs | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-agent-libs | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-debuginfo | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-debuginfo | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-devel | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-devel | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-gui | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-gui | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-libs | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-libs | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-perl | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-perl | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-python | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-python | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-sysvinit | 1:5.7.2-20.el7_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-sysvinit | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-utils | 1:5.7.2-20.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | net-snmp-utils | 1:5.7.2-20.el7_1.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Desktop 12 | net-snmp | 5.7.2.1-4.3.2 |
| SUSE Linux Enterprise Server 11 SP3 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Server 11 SP4 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Server 12 | net-snmp | 5.7.2.1-4.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | net-snmp | 5.7.2.1-4.3.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | net-snmp | 5.4.2.1-8.12.24.1 |
| SUSE Linux Enterprise Software Development Kit 12 | net-snmp | 5.7.2.1-4.3.2 |
| Ubuntu 14.04 LTS | net-snmp | 5.7.2~dfsg-8.1ubuntu3.1 |
| openSUSE Tumbleweed | net-snmp | 5.7.3-8.4 |