537 matches found
net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd
A flaw was found in net-snmp. A remote attacker can trigger a buffer overflow in the snmptrapd daemon by sending a specially crafted SNMP packet, causing the daemon to crash and resulting in a denial of service...
RHSA-2026:0750 Red Hat Security Advisory: net-snmp security update
Bulletin has no description...
ALSA-2026:0750 Important: net-snmp security update
The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios
--- README.md markdown 🐆 JAGUARTOOTH Analysis &...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002289)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002289 advisory. Buffer overflow in the qethsnmpcommand function in drivers/s390/net/qethcoremain.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service...
MGASA-2026-0008 Updated net-snmp packages fix security vulnerability
Net-SNMP snmptrapd crash. CVE-2025-68615...
SUSE-SU-2026:20078-1 Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate bsc1252281. - CVE-2025-59362: SNMP message processing component of Squid Cache can...
[SECURITY] [DSA 6098-1] net-snmp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6098-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 12, 2026 https://www.debian.org/security/faq -...
USN-7944-1 net-snmp vulnerability
Bahae Bahrini discovered that Net-SNMP could be made to write out of bounds. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000287)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000287 advisory. In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error,...
Net-SNMP snmptrapd crash
...
CVE-2025-40940
A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data,...
CVE-2025-13373 Advantech iView SQL Injection
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...
CVE-2025-66399 SNMP Command Injection leads to RCE in Cacti
Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...
[SECURITY] [DLA 4381-1] net-snmp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4381-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 25, 2025 https://wiki.debian.org/LTS -...
Advantech iView SQL Injection Vulnerability (CNVD-2025-31062)
Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that originates from an authentication bypass in the getInventoryReportData parameter of the...
Advantech iView SQL Injection Vulnerability (CNVD-2025-31065)
Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the ztpsearchvalue...
Lexmark Printers Improper Input Validation (CVE-2023-26070)
An input validation vulnerability has been identified in the SNMP feature in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503895; scriptversion"1.3";...
EUVD-2020-30815
Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...