CVE-2015-5621

🗓️ 19 Aug 2015 15:00:00Reported by mitreType

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Net-SNMP affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-5621)	17 Jun 201815:37	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in net-snmp affects IBM Security Network Protection (CVE-2015-5621)	16 Jun 201821:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Net-SNMP affect IBM Security Access Manager for Mobile (CVE-2014-3565, CVE-2015-5621)	16 Jun 201821:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in bind, glibc, net-snmp, spice affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Net-SNMP affect IBM Security Access Manager for Web (CVE-2014-3565, CVE-2015-5621)	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Net-SNMP affects PowerKVM (CVE-2015-5621)	18 Jun 201801:29	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in net-snmp affects IBM DataPower Gateways (CVE-2015-5621)	15 Jun 201807:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities vulnerabilities	28 Sep 201804:30	–	ibm

NVD

Node

net-snmp net-snmpRange≤5.7.2

Source	Link
openwall	www.openwall.com/lists/oss-security/2015/07/31/1
sourceforge	www.sourceforge.net/p/net-snmp/bugs/2615/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
exploit-db	www.exploit-db.com/exploits/45547/
securitytracker	www.securitytracker.com/id/1033304
lists	www.lists.opensuse.org/opensuse-updates/2015-09/msg00004.html
sourceforge	www.sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791/
openwall	www.openwall.com/lists/oss-security/2015/04/16/15
debian	www.debian.org/security/2018/dsa-4154

06 May 2026 22:30Current

8.1High risk

Vulners AI Score8.1

CVSS 27.5

CVSS 3.17.5

EPSS0.17699

SSVC