Description
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | net-snmp | 5.7.2.1~dfsg-3 | — |
| Debian 13 | net-snmp | 5.7.2.1~dfsg-3 | — |
| Debian 12 | net-snmp | 5.7.2.1~dfsg-3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | net-snmp +5 | 1:5.5-49.el6_5.1 | RHSA-2014:0321 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | net-snmp | 5.7.3-8.4 | openSUSE-SU-2024:10204-1 |
Advisories 3
- RHSA-2014:0321 Red Hat Security Advisory: net-snmp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10204-1 libsnmp30-32bit-5.7.3-8.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1694 Net-SNMP: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jul 31, 2025
References
- openSUSE-SU-2014:0398 vendor-advisory
- openSUSE-SU-2014:0399 vendor-advisory
- 57583 third-party-advisory
- 57124 third-party-advisory
- USN-2166-1 vendor-advisory
- 59974 third-party-advisory
- RHSA-2014:0321 vendor-advisory
- [net-snmp-announce] 20140225 Multiple Security-fix Net-SNMP Releases: 5.5.2.1, 5.6.2.1, and 5.7.2.1 mailing-list
- 57870 third-party-advisory
- 57526 third-party-advisory
- GLSA-201409-02 vendor-advisory
- [oss-security] 20140305 CVE request for two net-snmp remote DoS flaws mailing-list