vulnwire
5.0med

CVE-2005-2177

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.9%
percentile 90%
Public exploits
0
none known

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.

Exploit prediction (EPSS)

3.93% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-20 Improper Input Validation

References

  • vupen.com /english/advisories/2006/4502 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/17282 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • ubuntu.com /usn/usn-190-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/22875 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25373 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9986 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securityfocus.com /bid/21256 · vdb-entry, x_refsource_BID, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-102725-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • vmware.com /download/esx/esx-202-200610-patch.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/16999 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • novell.com /linux/security/advisories/2007_12_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securityfocus.com /archive/1/451426/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • trustix.org /errata/2005/0034/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • debian.org /security/2005/dsa-873 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • vmware.com /download/esx/esx-213-200610-patch.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/15930 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/23058 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2006/4677 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18635 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1017273 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2005-225.pdf · x_refsource_CONFIRM, x_transferred
  • vmware.com /download/esx/esx-254-200610-patch.html · x_refsource_CONFIRM, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2006:025 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • novell.com /linux/security/advisories/2005_24_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • vupen.com /english/advisories/2007/1883 · vdb-entry, x_refsource_VUPEN, x_transferred
  • redhat.com /support/errata/RHSA-2005-395.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • novell.com /linux/security/advisories/2007_13_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/17217 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2005-373.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/17135 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/451404/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/17007 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • net-snmp.org /about/ChangeLog.html · x_refsource_MISC, x_transferred
  • sourceforge.net /mailarchive/forum.php?thread_id=7659656&forum_id=12455 · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /archive/1/451417/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/25787 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/17343 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/14168 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/451419/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/25432 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2005-720.html

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.