CVEvulnerability

CVE-2005-4837

10.0 HIGH Published 2005-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-16, CWE-189

Description

snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.

Affected configurations

• net-snmp net-snmp 5.0 • net-snmp net-snmp 5.0.1 • net-snmp net-snmp 5.0.2 • net-snmp net-snmp 5.0.3 • net-snmp net-snmp 5.0.4 pre2 • net-snmp net-snmp 5.0.5 • net-snmp net-snmp 5.0.6 • net-snmp net-snmp 5.0.7 • net-snmp net-snmp 5.0.8 • net-snmp net-snmp 5.0.9 • net-snmp net-snmp 5.0.10 • sourceforge net-snmp (<= 5.0.9) • sourceforge net-snmp (<= 5.1.2) • sourceforge net-snmp (<= 5.2.1.2)

Related

Weakness · not in database (2)

References