Net-snmp vulnerabilities
We track 4 vulnerabilities in Net-snmp products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.
Latest Net-snmp vulnerabilities
- 7.5 High severity
Net-SNMP: Uncontrolled Resource Consumption
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listene
- 9.8 Critical severity
net-snmp: Improper Restriction of Operations within the Bounds of a Memory Buffer
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5
- 8.8 High severity
net-snmp: NULL Pointer Dereference
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains
- 8.8 High severity
net-snmp: Buffer Copy without Checking Size of Input
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read-only credentials can