{"action":"Upgrade net-snmp to 5.7.3+dfsg-1.1 or later.","affected":[{"fixed":"5.7.3+dfsg-1.1","introduced":"0"}],"component":"net-snmp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["5.7.3+dfsg-1.1"],"id":"tcs_01M5NB8PP55XCMJEYB1WA0SNAX","modified_at":"2026-09-09T07:00:09.141623304Z","published_at":"2015-08-19T15:59:09.460Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-5621","https://security-tracker.debian.org/tracker/CVE-2015-5621"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-5621#Debian:13/net-snmp","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-5621"}],"summary":"The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote att"}