Debian/net-snmp: high 7.5
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote att
Action: Upgrade net-snmp to 5.7.3+dfsg-1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.3+dfsg-1.1 | - |
Fixed versions
| 5.7.3+dfsg-1.1 |
Sources
- osv: DEBIAN-CVE-2015-5621#Debian:13/net-snmp
- https://security-tracker.debian.org/tracker/CVE-2015-5621
published · modified · JSON