Description
Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | net-snmp | 5.2.1.2-1 | — |
| Debian 13 | net-snmp | 5.2.1.2-1 | — |
| Debian 12 | net-snmp | 5.2.1.2-1 | — |
| Debian 3.1 | net-snmp | 5.1.2-6.2 | DSA-873-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | net-snmp +4 | 5.1.2-11.EL4.6 | RHSA-2005:395 |
| RHEL 3 | net-snmp +4 | 5.0.9-2.30E.19 | RHSA-2005:373 |
Advisories 3
- RHSA-2005:395 Red Hat Security Advisory: net-snmp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:373 Red Hat Security Advisory: net-snmp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-873-1 net-snmp - programming error Debian Security (DSA / DLA) · Mar 9, 2026
References
- ADV-2006-4502 vdb-entry
- 17282 third-party-advisory
- USN-190-1 vendor-advisory
- 22875 third-party-advisory
- 25373 third-party-advisory
- oval:org.mitre.oval:def:9986 vdb-entry signature
- 21256 vdb-entry
- 102725 vendor-advisory
- http://www.vmware.com/download/esx/esx-202-200610-patch.html
- 16999 third-party-advisory
- SUSE-SR:2007:012 vendor-advisory
- 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 mailing-list
- 2005-0034 vendor-advisory
- DSA-873 vendor-advisory
- http://www.vmware.com/download/esx/esx-213-200610-patch.html
- 15930 third-party-advisory
- 23058 third-party-advisory
- ADV-2006-4677 vdb-entry
- 18635 third-party-advisory
- 1017273 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2005-225.pdf
- http://www.vmware.com/download/esx/esx-254-200610-patch.html
- MDKSA-2006:025 vendor-advisory
- SUSE-SR:2005:024 vendor-advisory
- ADV-2007-1883 vdb-entry
- RHSA-2005:395 vendor-advisory
- SUSE-SR:2007:013 vendor-advisory
- 17217 third-party-advisory
- RHSA-2005:373 vendor-advisory
- 17135 third-party-advisory
- 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 mailing-list
- 17007 third-party-advisory
- http://www.net-snmp.org/about/ChangeLog.html
- [net-snmp-announce] 20050701 Multiple new Net-SNMP releases to fix a security related bug mailing-list
- 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 mailing-list
- 25787 third-party-advisory
- 17343 third-party-advisory
- 14168 vdb-entry
- 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1 mailing-list
- 25432 third-party-advisory
- RHSA-2005:720 vendor-advisory