Approved changes feed: RSS · Atom

cpe:2.3:a:net-snmp:net-snmp:5.2.5:*:*:*:*:*:*:*

part: a version: 5.2.5 update: *

VendorNet Snmp (523d2d8f-e353-5982-9c51-203e0c8bb745)
ProductNet Snmp (1322b451-4589-58f4-ad9e-4a7239ee3363)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/sanbrother/net-snmp purl2cpe 2026-06-01 10:14:48.835313
pkg:deb/debian/net-snmp purl2cpe 2026-06-01 10:14:48.835314
pkg:deb/ubuntu/net-snmp purl2cpe 2026-06-01 10:14:48.835315
pkg:github/hardaker/net-snmp purl2cpe 2026-06-01 10:14:48.835317
pkg:github/net-snmp/net-snmp purl2cpe 2026-06-01 10:14:48.835318
pkg:gitlab/redhat/net-snmp purl2cpe 2026-06-01 10:14:48.835320
pkg:rpm/centos/net-snmp purl2cpe 2026-06-01 10:14:48.835321
pkg:rpm/fedora/net-snmp purl2cpe 2026-06-01 10:14:48.835322
pkg:rpm/opensuse/net-snmp purl2cpe 2026-06-01 10:14:48.835324
pkg:sourceforge/net-snmp purl2cpe 2026-06-01 10:14:48.835325

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4309 vulnerable 2026-06-08 04:50:38.579074 Details available
Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow, related to the number of responses or repeats.
Published: 2008-10-31T20:00:00.000Z
Updated: 2026-05-28T18:05:58.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.