CVE-2015-5621

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
net-snmpnet-snmp
𝑥
≤ 5.7.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
net-snmp
bookworm
5.9.3+dfsg-2
fixed
bullseye
5.9+dfsg-4+deb11u1
fixed
bullseye (security)
5.9+dfsg-4+deb11u1
fixed
sid
5.9.4+dfsg-1.1
fixed
squeeze
no-dsa
trixie
5.9.4+dfsg-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
net-snmp
precise
Fixed 5.4.3~dfsg-2.4ubuntu1.3
released
trusty
Fixed 5.7.2~dfsg-8.1ubuntu3.1
released
vivid
Fixed 5.7.2~dfsg-8.1ubuntu5.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libsnmp30
suse enterprise desktop 15
5.7.3-5.21
fixed
suse enterprise desktop 15 SP1
5.7.3-8.24
fixed
suse enterprise desktop 15 SP2
5.7.3-8.24
fixed
suse enterprise desktop 15 SP3
5.7.3-8.24
fixed
suse enterprise desktop 15 SP4
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP5
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP6
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP7
5.7.3-10.12.1
fixed
suse enterprise sap 12
5.7.2.1-4.3.2
fixed
suse enterprise sap 12 SP5
5.7.3-6.6.1
fixed
suse enterprise sap 15
5.7.3-5.21
fixed
suse enterprise sap 15 SP1
5.7.3-8.24
fixed
suse enterprise sap 15 SP2
5.7.3-8.24
fixed
suse enterprise sap 15 SP3
5.7.3-8.24
fixed
suse enterprise sap 15 SP4
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP5
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP6
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP7
5.7.3-10.12.1
fixed
suse enterprise server 12
5.7.2.1-4.3.2
fixed
suse enterprise server 12 SP1
5.7.3-4.2
fixed
suse enterprise server 12 SP2
5.7.3-4.2
fixed
suse enterprise server 12 SP3
5.7.3-4.2
fixed
suse enterprise server 12 SP5
5.7.3-6.6.1
fixed
suse enterprise server 15
5.7.3-5.21
fixed
suse enterprise server 15 SP1
5.7.3-8.24
fixed
suse enterprise server 15 SP2
5.7.3-8.24
fixed
suse enterprise server 15 SP3
5.7.3-8.24
fixed
suse enterprise server 15 SP4
5.7.3-10.12.1
fixed
suse enterprise server 15 SP5
5.7.3-10.12.1
fixed
suse enterprise server 15 SP6
5.7.3-10.12.1
fixed
suse enterprise server 15 SP7
5.7.3-10.12.1
fixed
libsnmp30-32bit
suse enterprise sap 12
5.7.2.1-4.3.2
fixed
suse enterprise sap 12 SP5
5.7.3-6.6.1
fixed
suse enterprise server 12
5.7.2.1-4.3.2
fixed
suse enterprise server 12 SP1
5.7.3-4.2
fixed
suse enterprise server 12 SP2
5.7.3-4.2
fixed
suse enterprise server 12 SP3
5.7.3-4.2
fixed
suse enterprise server 12 SP5
5.7.3-6.6.1
fixed
libsnmp40
suse enterprise desktop 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise desktop 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise desktop 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise sap 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise sap 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise sap 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise server 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise server 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise server 15 SP7
5.9.4-150600.24.5.2
fixed
net-snmp
suse enterprise desktop 15
5.7.3-5.21
fixed
suse enterprise desktop 15 SP1
5.7.3-8.24
fixed
suse enterprise desktop 15 SP2
5.7.3-8.24
fixed
suse enterprise desktop 15 SP3
5.7.3-8.24
fixed
suse enterprise desktop 15 SP4
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise desktop 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise desktop 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise sap 12
5.7.2.1-4.3.2
fixed
suse enterprise sap 12 SP5
5.7.3-6.6.1
fixed
suse enterprise sap 15
5.7.3-5.21
fixed
suse enterprise sap 15 SP1
5.7.3-8.24
fixed
suse enterprise sap 15 SP2
5.7.3-8.24
fixed
suse enterprise sap 15 SP3
5.7.3-8.24
fixed
suse enterprise sap 15 SP4
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise sap 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise sap 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise server 12
5.7.2.1-4.3.2
fixed
suse enterprise server 12 SP1
5.7.3-4.2
fixed
suse enterprise server 12 SP2
5.7.3-4.2
fixed
suse enterprise server 12 SP3
5.7.3-4.2
fixed
suse enterprise server 12 SP5
5.7.3-6.6.1
fixed
suse enterprise server 15
5.7.3-5.21
fixed
suse enterprise server 15 SP1
5.7.3-8.24
fixed
suse enterprise server 15 SP2
5.7.3-8.24
fixed
suse enterprise server 15 SP3
5.7.3-8.24
fixed
suse enterprise server 15 SP4
5.7.3-10.12.1
fixed
suse enterprise server 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise server 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise server 15 SP7
5.9.4-150600.24.5.2
fixed
net-snmp-devel
suse enterprise desktop 15
5.7.3-5.21
fixed
suse enterprise desktop 15 SP1
5.7.3-8.24
fixed
suse enterprise desktop 15 SP2
5.7.3-8.24
fixed
suse enterprise desktop 15 SP3
5.7.3-8.24
fixed
suse enterprise desktop 15 SP4
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise desktop 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise desktop 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise sap 15
5.7.3-5.21
fixed
suse enterprise sap 15 SP1
5.7.3-8.24
fixed
suse enterprise sap 15 SP2
5.7.3-8.24
fixed
suse enterprise sap 15 SP3
5.7.3-8.24
fixed
suse enterprise sap 15 SP4
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise sap 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise sap 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise server 15
5.7.3-5.21
fixed
suse enterprise server 15 SP1
5.7.3-8.24
fixed
suse enterprise server 15 SP2
5.7.3-8.24
fixed
suse enterprise server 15 SP3
5.7.3-8.24
fixed
suse enterprise server 15 SP4
5.7.3-10.12.1
fixed
suse enterprise server 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise server 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise server 15 SP7
5.9.4-150600.24.5.2
fixed
perl-SNMP
suse enterprise desktop 15
5.7.3-5.21
fixed
suse enterprise desktop 15 SP1
5.7.3-8.24
fixed
suse enterprise desktop 15 SP2
5.7.3-8.24
fixed
suse enterprise desktop 15 SP3
5.7.3-8.24
fixed
suse enterprise desktop 15 SP4
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise desktop 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise desktop 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise sap 12
5.7.2.1-4.3.2
fixed
suse enterprise sap 12 SP5
5.7.3-6.6.1
fixed
suse enterprise sap 15
5.7.3-5.21
fixed
suse enterprise sap 15 SP1
5.7.3-8.24
fixed
suse enterprise sap 15 SP2
5.7.3-8.24
fixed
suse enterprise sap 15 SP3
5.7.3-8.24
fixed
suse enterprise sap 15 SP4
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise sap 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise sap 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise server 12
5.7.2.1-4.3.2
fixed
suse enterprise server 12 SP1
5.7.3-4.2
fixed
suse enterprise server 12 SP2
5.7.3-4.2
fixed
suse enterprise server 12 SP3
5.7.3-4.2
fixed
suse enterprise server 12 SP5
5.7.3-6.6.1
fixed
suse enterprise server 15
5.7.3-5.21
fixed
suse enterprise server 15 SP1
5.7.3-8.24
fixed
suse enterprise server 15 SP2
5.7.3-8.24
fixed
suse enterprise server 15 SP3
5.7.3-8.24
fixed
suse enterprise server 15 SP4
5.7.3-10.12.1
fixed
suse enterprise server 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise server 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise server 15 SP7
5.9.4-150600.24.5.2
fixed
snmp-mibs
suse enterprise desktop 15
5.7.3-5.21
fixed
suse enterprise desktop 15 SP1
5.7.3-8.24
fixed
suse enterprise desktop 15 SP2
5.7.3-8.24
fixed
suse enterprise desktop 15 SP3
5.7.3-8.24
fixed
suse enterprise desktop 15 SP4
5.7.3-10.12.1
fixed
suse enterprise desktop 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise desktop 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise desktop 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise sap 12
5.7.2.1-4.3.2
fixed
suse enterprise sap 12 SP5
5.7.3-6.6.1
fixed
suse enterprise sap 15
5.7.3-5.21
fixed
suse enterprise sap 15 SP1
5.7.3-8.24
fixed
suse enterprise sap 15 SP2
5.7.3-8.24
fixed
suse enterprise sap 15 SP3
5.7.3-8.24
fixed
suse enterprise sap 15 SP4
5.7.3-10.12.1
fixed
suse enterprise sap 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise sap 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise sap 15 SP7
5.9.4-150600.24.5.2
fixed
suse enterprise server 12
5.7.2.1-4.3.2
fixed
suse enterprise server 12 SP1
5.7.3-4.2
fixed
suse enterprise server 12 SP2
5.7.3-4.2
fixed
suse enterprise server 12 SP3
5.7.3-4.2
fixed
suse enterprise server 12 SP5
5.7.3-6.6.1
fixed
suse enterprise server 15
5.7.3-5.21
fixed
suse enterprise server 15 SP1
5.7.3-8.24
fixed
suse enterprise server 15 SP2
5.7.3-8.24
fixed
suse enterprise server 15 SP3
5.7.3-8.24
fixed
suse enterprise server 15 SP4
5.7.3-10.12.1
fixed
suse enterprise server 15 SP5
5.9.3-150300.15.8.1
fixed
suse enterprise server 15 SP6
5.9.4-150600.22.4
fixed
suse enterprise server 15 SP7
5.9.4-150600.24.5.2
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
net-snmp
RHEL 6
1:5.5-54.el6_7.1
fixed
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-agent-libs
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-devel
RHEL 6
1:5.5-54.el6_7.1
fixed
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-gui
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-libs
RHEL 6
1:5.5-54.el6_7.1
fixed
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-perl
RHEL 6
1:5.5-54.el6_7.1
fixed
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-python
RHEL 6
1:5.5-54.el6_7.1
fixed
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-sysvinit
RHEL 7
1:5.7.2-20.el7_1.1
fixed
net-snmp-utils
RHEL 6
1:5.5-54.el6_7.1
fixed
RHEL 7
1:5.7.2-20.el7_1.1
fixed
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html
http://rhn.redhat.com/errata/RHSA-2015-1636.html
http://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/
http://support.citrix.com/article/CTX209443
http://www.openwall.com/lists/oss-security/2015/04/13/1
http://www.openwall.com/lists/oss-security/2015/04/16/15
http://www.openwall.com/lists/oss-security/2015/07/31/1
http://www.securityfocus.com/bid/76380
http://www.securitytracker.com/id/1033304
http://www.ubuntu.com/usn/USN-2711-1
https://bugzilla.redhat.com/show_bug.cgi?id=1212408
https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
https://sourceforge.net/p/net-snmp/bugs/2615/
https://www.debian.org/security/2018/dsa-4154
https://www.exploit-db.com/exploits/45547/
http://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html
http://rhn.redhat.com/errata/RHSA-2015-1636.html
http://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/
http://support.citrix.com/article/CTX209443
http://www.openwall.com/lists/oss-security/2015/04/13/1
http://www.openwall.com/lists/oss-security/2015/04/16/15
http://www.openwall.com/lists/oss-security/2015/07/31/1
http://www.securityfocus.com/bid/76380
http://www.securitytracker.com/id/1033304
http://www.ubuntu.com/usn/USN-2711-1
https://bugzilla.redhat.com/show_bug.cgi?id=1212408
https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
https://sourceforge.net/p/net-snmp/bugs/2615/
https://www.debian.org/security/2018/dsa-4154
https://www.exploit-db.com/exploits/45547/