Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Net-SNMP agent can crash on remote disconnect

CVE-2005-4837 · published 20 years ago
Summary

The Net-SNMP daemon on Debian systems can stop working if an attacker forces a specific network connection to close while the software is running in master agentx mode. This causes the program to crash, making management data unavailable. Upgrade Net-SNMP to version 5.2.2, 5.1.3, or 5.0.10.2 or later, or apply the vendor's security patch to prevent the issue.

What to do
  • Update debian net-snmp to version 5.2.2-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian net-snmp < 5.2.2-1
Fix: upgrade to 5.2.2-1
Debian:13 debian net-snmp < 5.2.2-1
Fix: upgrade to 5.2.2-1
Debian:14 debian net-snmp < 5.2.2-1
Fix: upgrade to 5.2.2-1
– net-snmp net-snmp 5.0
5.0.1
5.0.2
5.0.3
5.0.4_pre2
5.0.5
5.0.6
5.0.7
5.0.8
5.0.9
5.0.10
cpe:2.3:a:net-snmp:net-snmp:5.0:*:*:*:*:*:*:*
– sourceforge net-snmp <= 5.0.9
<= 5.1.2
<= 5.2.1.2
cpe:2.3:a:sourceforge:net-snmp:*:*:*:*:*:*:*:*
Original advisory text
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) b...
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.
References
Severity
10.0 Critical
Exploitation
10% chance of attack within 30 days
Type
CWE-16Configuration
CWE-189Numeric Errors
Timeline
Published31 Dec 2005
Updated15 Oct 2026
First seen26 Sep 2026
Sources
DEBIAN-CVE-2005-4837 · OSV
CVE-2005-4837 · NVD
Track software like this
Free during beta