Updated: 2026-01-08 06:12:58.014532
Description:
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
| Links | NIST | CIRCL | RHEL | Ubuntu |
| Severity | Score | |
|---|---|---|
| CVSS Version 2.x | NONE | 0.0 |
| CVSS Version 3.x | HIGH | 9.8 |
| OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
|---|---|---|---|---|---|---|---|---|
| AlmaLinux 9.2 ESU | net-snmp | 5.9.1 | 9.8 | HIGH | Released | CLSA-2026:1769794805 | 2026-01-30 22:57:31 | |
| CentOS 7 ELS | net-snmp | 5.7.2 | 9.8 | HIGH | Released | CLSA-2026:1769774083 | 2026-02-10 13:42:41 | |
| Oracle Linux 7 ELS | net-snmp | 5.7.2 | 9.8 | HIGH | Released | CLSA-2026:1770114861 | 2026-02-03 15:39:50 | |
| TuxCare 9.6 ESU | net-snmp | 5.9.1 | 9.8 | HIGH | Released | CLSA-2026:1769773749 | 2026-01-30 14:51:43 |