UBUNTU-CVE-2026-111137

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

CVE-2026-111137

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

Linux Distros Unpatched Vulnerability : CVE-2026-111137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static...

CVE-2026-111137

A flaw was found in libsmi. An out-of-bounds write vulnerability in the smiValueAsString function allows an attacker to cause a Denial of Service DoS. By supplying a specially crafted Management Information Base MIB file containing an oversized string value, an attacker can overflow an internal...

CVE-2026-111137

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

DEBIAN-CVE-2026-111137

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

CVE-2026-111137

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

CVE-2026-111137 libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

CVE-2026-111137

The libsmi library, versions through 0.5.0 , is vulnerable to an out-of-bounds write in the smiValueAsString() function located in lib/smi.c . The root cause is a buffer overflow of a fixed 1024-byte static buffer during the hex rendering of OCTET STRING values. An attacker can trigger this by su...

CVE-2026-111137 libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

CVE-2026-111137: Out-of-bounds Write

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

PT-2026-115143

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

FreeBSD : libsmi -- Buffer overflow in the smiGetNode function in lib/smi (76b09b16-638b-11f1-8e16-901b0e13f1a0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 76b09b16-638b-11f1-8e16-901b0e13f1a0 advisory. http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html reports: Buffer overflow in...

CBL Mariner 2.0 Security Update: libsmi (CVE-2010-2891)

The version of libsmi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2010-2891 advisory. - Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to...

OPENSUSE-SU-2024:10266-1 libsmi-0.4.8-24.8 on GA media

These are all security issues fixed in the libsmi-0.4.8-24.8 package on the GA media of openSUSE Tumbleweed...

RHEL 5 : libsmi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution CVE-2010-2891 Note that Nessus has not...

RHEL 4 : libsmi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution CVE-2010-2891 Note that Nessus has not...

RHEL 6 : libsmi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution CVE-2010-2891 Note that Nessus has not...

CVE-2010-2891 affecting package libsmi for versions less than 0.4.8-28

CVE-2010-2891 affecting package libsmi for versions less than 0.4.8-28. A patched version of the package is available...

SUSE CVE-2010-2891

Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier aka OID represented as a numerical string containing many components separated by . dot characters...