CVE Feed

    Dashboard / CVE / CVE-2015-5621

    CVE-2015-5621

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

    Published:Apr 13, 2015
    Last Modified:Dec 4, 2025
    EPS:Aug 19, 2015
    EPSS Score:0.27618
    CVSS Score:7.5

    Affected Products

    Vendor
    Net-snmp
    Product
    Net-snmp
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://www.openwall.com/lists/oss-security/2015/04/13/1http://www.openwall.com/lists/oss-security/2015/04/13/1https://www.exploit-db.com/exploits/45547

    Related CVEs

    CVE-2026-89147 (CVSS 8.7) — Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() per…
    CVE-2025-68615 (CVSS 9.8) — net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially c…
    CVE-2022-44792 (CVSS 6.5) — handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exc…
    CVE-2022-44793 (CVSS 6.5) — handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Point…
    CVE-2022-24810 (CVSS 6.5) — net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a …
    CVE-2022-24808 (CVSS 6.5) — net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a …
    CVE-2022-24805 (CVSS 6.5) — net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a …
    CVE-2022-24806 (CVSS 6.5) — net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a …
    CVE-2022-24809 (CVSS 6.5) — net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a …
    CVE-2022-24807 (CVSS 6.5) — net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a …

    References

    http://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html
    http://rhn.redhat.com/errata/RHSA-2015-1636.html
    http://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/
    http://support.citrix.com/article/CTX209443
    http://www.openwall.com/lists/oss-security/2015/04/13/1
    http://www.openwall.com/lists/oss-security/2015/04/16/15
    http://www.openwall.com/lists/oss-security/2015/07/31/1
    http://www.securityfocus.com/bid/76380
    http://www.securitytracker.com/id/1033304
    http://www.ubuntu.com/usn/USN-2711-1
    https://bugzilla.redhat.com/show_bug.cgi?id=1212408
    https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
    https://sourceforge.net/p/net-snmp/bugs/2615/
    https://www.debian.org/security/2018/dsa-4154
    https://www.exploit-db.com/exploits/45547/
    http://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html
    http://rhn.redhat.com/errata/RHSA-2015-1636.html
    http://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/
    http://support.citrix.com/article/CTX209443
    http://www.openwall.com/lists/oss-security/2015/04/13/1
    http://www.openwall.com/lists/oss-security/2015/04/16/15
    http://www.openwall.com/lists/oss-security/2015/07/31/1
    http://www.securityfocus.com/bid/76380
    http://www.securitytracker.com/id/1033304
    http://www.ubuntu.com/usn/USN-2711-1
    https://bugzilla.redhat.com/show_bug.cgi?id=1212408
    https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
    https://sourceforge.net/p/net-snmp/bugs/2615/
    https://www.debian.org/security/2018/dsa-4154
    https://www.exploit-db.com/exploits/45547/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High