Skip to content
OpenAdvisories
High USN-2711-1 2 CVEs

net-snmp vulnerabilities

Published Aug 17, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Net-SNMP incorrectly handled certain trap messages
when the -OQ option was used. A remote attacker could use this issue to
cause Net-SNMP to crash, resulting in a denial of service. (CVE-2014-3565)

Qinghao Tang discovered that Net-SNMP incorrectly handled SNMP PDU parsing
failures. A remote attacker could use this issue to cause Net-SNMP to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2015-5621)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS net-snmp 5.7.2~dfsg-8.1ubuntu3.1

Vulnerabilities 2

  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…

    net-snmp net-snmp Debian Ubuntu
  • Unscored —
    CVE-2014-3565

    snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of …

    net-snmp net-snmp Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3565
  • report
    https://ubuntu.com/security/CVE-2015-5621