| Package | Affected versions | Patched versions |
|---|---|---|
| net-snmp | = 5.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 5.1= 5.1.2= 5.2= 5.3= 5.3.0.1= 5.4= 5.5= 5.6≤ 5.7.0 |
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free