CVE-2007-5846
NoneCVSS
—
EPSS
29.2%
Published
Nov 6, 2007
CISA due date
—
The record
The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | net-snmp | 0 | 5.4.1~dfsg-1 |
| Debian:12 | net-snmp | 0 | 5.4.1~dfsg-1 |
| Debian:13 | net-snmp | 0 | 5.4.1~dfsg-1 |
| Debian:4.0 | net-snmp | 0 | 5.2.3-7etch2 |
| Debian:5.0 | net-snmp | 0 | 5.3.1-8+lenny1 |
| Red Hat:enterprise_linux:3::as | net-snmp | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::as | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::as | net-snmp-devel | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::as | net-snmp-libs | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::as | net-snmp-perl | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::as | net-snmp-utils | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::desktop | net-snmp | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-devel | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-libs | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-perl | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::desktop | net-snmp-utils | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::es | net-snmp | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::es | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::es | net-snmp-devel | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::es | net-snmp-libs | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::es | net-snmp-perl | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::es | net-snmp-utils | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::ws | net-snmp | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::ws | net-snmp-debuginfo | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::ws | net-snmp-devel | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::ws | net-snmp-libs | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::ws | net-snmp-perl | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:3::ws | net-snmp-utils | 0 | 0:5.0.9-2.30E.23 |
| Red Hat:enterprise_linux:4::as | net-snmp | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::as | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::as | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::as | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::as | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::as | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::desktop | net-snmp | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::desktop | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::es | net-snmp | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::es | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::es | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::es | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::es | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::es | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::ws | net-snmp | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::ws | net-snmp-debuginfo | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::ws | net-snmp-devel | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::ws | net-snmp-libs | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::ws | net-snmp-perl | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:4::ws | net-snmp-utils | 0 | 0:5.1.2-11.el4_6.11.1 |
| Red Hat:enterprise_linux:5::client | net-snmp | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-debuginfo | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-devel | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-libs | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-perl | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client | net-snmp-utils | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-debuginfo | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-devel | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-libs | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-perl | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | net-snmp-utils | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::server | net-snmp | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-debuginfo | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-devel | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-libs | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-perl | 0 | 1:5.3.1-19.el5_1.1 |
| Red Hat:enterprise_linux:5::server | net-snmp-utils | 0 | 1:5.3.1-19.el5_1.1 |
Related vulnerabilities
- CVE-2015-5621 The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove… Also affects net-snmp
- CVE-2014-3565 snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote… Also affects net-snmp
- CVE-2008-0960 SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and… Also affects net-snmp
- CVE-2026-41983 Null pointer dereference vulnerability in the browser module. Impact: Successful… CWE-399
- CVE-2015-9252 An issue was discovered in QPDF before 7.0.0. CWE-399
- CVE-2012-0881 Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of… CWE-399
- CVE-2015-7944 The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x… CWE-399
- CVE-2015-8855 The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service… CWE-399