Approved changes feed: RSS · Atom

cpe:2.3:a:net-snmp:net-snmp:5.2.4:*:*:*:*:*:*:*

part: a version: 5.2.4 update: *

VendorNet Snmp (523d2d8f-e353-5982-9c51-203e0c8bb745)
ProductNet Snmp (1322b451-4589-58f4-ad9e-4a7239ee3363)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/sanbrother/net-snmp purl2cpe 2026-06-01 10:14:48.835215
pkg:deb/debian/net-snmp purl2cpe 2026-06-01 10:14:48.835217
pkg:deb/ubuntu/net-snmp purl2cpe 2026-06-01 10:14:48.835218
pkg:github/hardaker/net-snmp purl2cpe 2026-06-01 10:14:48.835220
pkg:github/net-snmp/net-snmp purl2cpe 2026-06-01 10:14:48.835221
pkg:gitlab/redhat/net-snmp purl2cpe 2026-06-01 10:14:48.835222
pkg:rpm/centos/net-snmp purl2cpe 2026-06-01 10:14:48.835224
pkg:rpm/fedora/net-snmp purl2cpe 2026-06-01 10:14:48.835225
pkg:rpm/opensuse/net-snmp purl2cpe 2026-06-01 10:14:48.835226
pkg:sourceforge/net-snmp purl2cpe 2026-06-01 10:14:48.835228

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2292 vulnerable 2026-06-08 04:50:23.421775 Details available
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
Published: 2008-05-18T14:00:00.000Z
Updated: 2024-08-07T08:58:01.634Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.