Net-snmp Net-snmp vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Net-snmp Net-snmp: 2 record(s), with affected versions and fixes.
cpe:2.3:a:net-snmp:net-snmp

CVE-2026-89147 High · 7.5 CWE-400 Sep 11, 2026

Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read

Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.

CVE-2025-68615 Critical · 9.8 CWE-119 Dec 22, 2025

Net-SNMP snmptrapd crash

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.