Approved changes feed: RSS · Atom

cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*

part: a version: 5.0.9 update: *

VendorNet Snmp (523d2d8f-e353-5982-9c51-203e0c8bb745)
ProductNet Snmp (1322b451-4589-58f4-ad9e-4a7239ee3363)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/sanbrother/net-snmp purl2cpe 2026-06-01 10:14:48.811461
pkg:deb/debian/net-snmp purl2cpe 2026-06-01 10:14:48.811462
pkg:deb/ubuntu/net-snmp purl2cpe 2026-06-01 10:14:48.811464
pkg:github/hardaker/net-snmp purl2cpe 2026-06-01 10:14:48.811465
pkg:github/net-snmp/net-snmp purl2cpe 2026-06-01 10:14:48.811466
pkg:gitlab/redhat/net-snmp purl2cpe 2026-06-01 10:14:48.811468
pkg:rpm/centos/net-snmp purl2cpe 2026-06-01 10:14:48.811469
pkg:rpm/fedora/net-snmp purl2cpe 2026-06-01 10:14:48.811470
pkg:rpm/opensuse/net-snmp purl2cpe 2026-06-01 10:14:48.811472
pkg:sourceforge/net-snmp purl2cpe 2026-06-01 10:14:48.811473

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3565 vulnerable 2026-06-08 05:05:33.477612 Details available
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
Published: 2014-10-07T14:00:00.000Z
Updated: 2024-08-06T10:50:17.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6151 vulnerable 2026-06-08 05:02:59.805395 Details available
Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout.
Published: 2013-12-13T17:00:00.000Z
Updated: 2024-08-06T21:28:39.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1887 vulnerable 2026-06-08 04:51:25.558972 Details available
agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.
Published: 2009-06-26T18:00:00.000Z
Updated: 2024-08-07T05:27:54.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4837 vulnerable 2026-06-08 04:48:45.335837 Details available
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.
Published: 2007-04-10T23:00:00.000Z
Updated: 2024-08-08T00:01:23.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2811 vulnerable 2026-06-08 04:48:30.621103 Details available
Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges.
Published: 2005-09-07T04:00:00.000Z
Updated: 2024-09-17T02:46:53.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2177 vulnerable 2026-06-08 04:48:28.568578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1740 vulnerable 2026-06-08 04:48:27.314383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.