Description
The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | net-snmp | 5.4.1~dfsg-1 | — |
| Debian 13 | net-snmp | 5.4.1~dfsg-1 | — |
| Debian 12 | net-snmp | 5.4.1~dfsg-1 | — |
| Debian 5.0 | net-snmp | 5.3.1-8+lenny1 | DTSA-88-1 |
| Debian 4.0 | net-snmp | 5.2.3-7etch2 | DSA-1483-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | net-snmp +4 | 1:5.3.1-19.el5_1.1 | RHSA-2007:1045 |
| RHEL 4 | net-snmp +4 | 5.1.2-11.el4_6.11.1 | RHSA-2007:1045 |
| RHEL 3 | net-snmp +4 | 5.0.9-2.30E.23 | RHSA-2007:1045 |
Advisories 6
- RHSA-2007:1045 Red Hat Security Advisory: net-snmp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1483-1 net-snmp - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-88-1 net-snmp - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- ICSA-23-047-02 Siemens SCALANCE X200 IRT CISA ICS & IT advisories · Feb 14, 2023
- SSA-617755 SSA-617755: Denial of Service Vulnerability in the SNMP Agent of SCALANCE X-200IRT Products Siemens ProductCERT · Feb 14, 2023
References
- 27965 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=528095&group_id=12694
- USN-564-1 vendor-advisory
- 28413 third-party-advisory
- 38904 vdb-entry
- MDKSA-2007:225 vendor-advisory
- ADV-2007-3802 vdb-entry
- 27733 third-party-advisory
- 27685 third-party-advisory
- http://sourceforge.net/tracker/index.php?func=detail&aid=1712988&group_id=12694&atid=112694
- 20080416 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus mailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=198346
- FEDORA-2007-3019 vendor-advisory
- GLSA-200711-31 vendor-advisory
- SUSE-SR:2007:025 vendor-advisory
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730
- 1018918 vdb-entry
- 29785 third-party-advisory
- 27558 third-party-advisory
- 26378 vdb-entry
- ADV-2008-1234 vdb-entry
- RHSA-2007:1045 vendor-advisory
- 28825 third-party-advisory
- DSA-1483 vendor-advisory
- oval:org.mitre.oval:def:11258 vdb-entry signature
- http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-4-1/net-snmp/agent/snmp_agent.c?view=log
- [Security-announce] 20080415 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus mailing-list
- 27740 third-party-advisory
- 27689 third-party-advisory