Description
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | net-snmp | 5.4.3~dfsg-2.5 | — |
| Debian 13 | net-snmp | 5.4.3~dfsg-2.5 | — |
| Debian 12 | net-snmp | 5.4.3~dfsg-2.5 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | net-snmp +5 | 1:5.5-41.el6 | RHSA-2012:0876 |
| RHEL 5 | net-snmp +4 | 1:5.3.2.2-20.el5 | RHSA-2013:0124 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | net-snmp | 5.7.3-8.4 | openSUSE-SU-2024:10204-1 |
Advisories 3
- RHSA-2013:0124 Red Hat Security Advisory: net-snmp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2012:0876 Red Hat Security Advisory: net-snmp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10204-1 libsnmp30-32bit-5.7.3-8.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20120426 Re: CVE Request -- net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash) mailing-list
- RHSA-2013:0124 vendor-advisory
- netsnmp-snmpget-dos(75169) vdb-entry
- 1026984 vdb-entry
- 59974 third-party-advisory
- http://support.citrix.com/article/CTX139049
- [oss-security] 20120426 CVE Request -- net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash) mailing-list
- GLSA-201409-02 vendor-advisory
- 53258 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=815813
- 53255 vdb-entry
- 48938 third-party-advisory