Description
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | net-snmp | 5.7.3+dfsg-1.1 | — |
| Debian 13 | net-snmp | 5.7.3+dfsg-1.1 | — |
| Debian 12 | net-snmp | 5.7.3+dfsg-1.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | net-snmp +8 | 1:5.7.2-47.el7 | RHSA-2020:1081 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7.7 EUS | net-snmp +8 | 1:5.7.2-43.el7_7.6 | RHSA-2020:2539 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | net-snmp +8 | 1:5.7.2-48.amzn2.1 | ALAS2-2020-1454 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | net-snmp +8 | 1:5.7.2-47.el7 | ELSA-2020-1081 |
Advisories 6
- RHSA-2020:2539 Red Hat Security Advisory: net-snmp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2020:1081 Red Hat Security Advisory: net-snmp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2025-1692 Net-SNMP: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 31, 2025
- ICSA-23-234-01 Hitachi Energy AFF66x CISA ICS & IT advisories · Aug 22, 2023
- ALAS2-2020-1454 Moderate: net-snmp security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 17, 2020
- ELSA-2020-1081 Moderate: net-snmp security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 6, 2020
References
- https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/
- https://dumpco.re/blog/net-snmp-5.7.3-remote-dos
- https://security.netapp.com/advisory/ntap-20181107-0001/
- https://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html