CVE-2015-5621
High · 7.5CVSS
7.5
EPSS
38.3%
Published
Aug 19, 2015
CISA due date
—
The record
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | net-snmp | 0 | 5.7.3+dfsg-1.1 |
| Debian:12 | net-snmp | 0 | 5.7.3+dfsg-1.1 |
| Debian:13 | net-snmp | 0 | 5.7.3+dfsg-1.1 |
| Debian:7 | net-snmp | 0 | 5.4.3~dfsg-2.8+deb7u2 |
| Debian:8 | net-snmp | 0 | 5.7.2.1+dfsg-1+deb8u1 |
| Red Hat:enterprise_linux:6::client | net-snmp | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::client | net-snmp-debuginfo | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::client | net-snmp-devel | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::client | net-snmp-libs | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::client | net-snmp-perl | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::client | net-snmp-python | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::client | net-snmp-utils | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp-debuginfo | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp-devel | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp-libs | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp-perl | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp-python | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | net-snmp-utils | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp-debuginfo | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp-devel | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp-libs | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp-perl | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp-python | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::server | net-snmp-utils | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp-debuginfo | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp-devel | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp-libs | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp-perl | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp-python | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | net-snmp-utils | 0 | 1:5.5-54.el6_7.1 |
| Red Hat:enterprise_linux:7::client | net-snmp | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-agent-libs | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-debuginfo | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-devel | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-gui | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-libs | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-perl | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-python | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-sysvinit | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::client | net-snmp-utils | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-agent-libs | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-debuginfo | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-devel | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-gui | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-libs | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-perl | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-python | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-sysvinit | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::computenode | net-snmp-utils | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-agent-libs | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-debuginfo | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-devel | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-gui | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-libs | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-perl | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-python | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-sysvinit | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::server | net-snmp-utils | 0 | 1:5.7.2-20.ael7b_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-agent-libs | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-debuginfo | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-devel | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-gui | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-libs | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-perl | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-python | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-sysvinit | 0 | 1:5.7.2-20.el7_1.1 |
| Red Hat:enterprise_linux:7::workstation | net-snmp-utils | 0 | 1:5.7.2-20.el7_1.1 |
| SUSE:Linux Enterprise Desktop 11 SP3 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Desktop 11 SP4 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Desktop 12 | net-snmp | 0 | 5.7.2.1-4.3.2 |
| SUSE:Linux Enterprise Server 11 SP3 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Server 11 SP4 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Server 12 | net-snmp | 0 | 5.7.2.1-4.3.2 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP3 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | net-snmp | 0 | 5.7.2.1-4.3.2 |
| SUSE:Linux Enterprise Software Development Kit 11 SP3 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | net-snmp | 0 | 5.4.2.1-8.12.24.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | net-snmp | 0 | 5.7.2.1-4.3.2 |
| Ubuntu:14.04:LTS | net-snmp | 0 | 5.7.2~dfsg-8.1ubuntu3.1 |
| openSUSE:Tumbleweed | net-snmp | 0 | 5.7.3-8.4 |
Related vulnerabilities
- CVE-2014-3565 snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote… Also affects net-snmp
- CVE-2008-0960 SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and… Also affects net-snmp
- CVE-2007-5846 The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a… Also affects net-snmp
- CVE-2025-68615 net-snmp is a SNMP application library, tools and daemon. Also affects net-snmp
- CVE-2019-12828 An issue was discovered in Electronic Arts Origin before 10.5.39. CWE-19
- CVE-2019-0946 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0947 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0945 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19