Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-5621 — Integer Overflow or Wraparound in Net-snmp

CWE-19CWE-190 — Integer Overflow or WraparoundCWE-772 — Missing Release of Resource after Effective LifetimeCWE-672 — Operation on a Resource after Expiration or ReleaseCWE-665 — Improper Initialization13 documents9 sources
Severity
7.5HIGHNVD
OSV5.0
EPSS
17.8%
top 4.86%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Net-snmpDebian Net-snmp
Timeline
PublishedAug 19
Latest updateMay 14

Description

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/net-snmp< net-snmp 5.7.3+dfsg-1.1 (bookworm)
▶Debiannet-snmp/net-snmp< 5.7.3+dfsg-1.1+3
▶Ubuntunet-snmp/net-snmp< 5.7.2~dfsg-8.1ubuntu3.1

🔴Vulnerability Details

3
GHSA
GHSA-w7cc-jv4p-qccr: The snmp_pdu_parse function in snmp_api↗2022-05-14
▶
OSV
CVE-2015-5621: The snmp_pdu_parse function in snmp_api↗2015-08-19
▶
OSV
net-snmp vulnerabilities↗2015-08-17
▶

💥Exploits & PoCs

1
Exploit-DB
net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)↗2018-10-08
▶

📋Vendor Advisories

4
CISA ICS
Siemens Industrial Products SNMP (Update F)↗2022-02-10
▶
Ubuntu
Net-SNMP vulnerabilities↗2015-08-17
▶
Red Hat
net-snmp: snmp_pdu_parse() incompletely parsed varBinds left in list of variables↗2015-04-13
▶
Debian
CVE-2015-5621: net-snmp - The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not...↗2015
▶

💬Community

4
Bugzilla
CVE-2018-18065 net-snmp: NULL pointer exception in _set_key in agent/helpers/table_container.c resulting in a denial of service↗2018-10-09
▶
Bugzilla
CVE-2018-18066 net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service↗2018-10-09
▶
Bugzilla
CVE-2018-1000116 net-snmp: Heap corruption in snmp_pdu_parse function in snmplib/snmp_api.c↗2018-03-07
▶
Bugzilla
CVE-2015-5621 net-snmp: snmp_pdu_parse() incompletely parsed varBinds left in list of variables↗2015-04-16
▶