CVE-2007-5846: net-snmp Resource Management Errors
CVSS: 7.8v2.0HighModified
AliasesRHSA-2007:1045DEBIAN-CVE-2007-5846DSA-1483-1DTSA-88-1
Published 06-11-2007Last modified 07-08-2024
Vulnerability summary
CVE-2007-5846 is a high (CVSS 7.8) Resource Management Errors vulnerability in net-snmp. EPSS estimates a 28.97% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v2.0 (NVD)EPSS score
28.97%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 06-11-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.8Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
28.97%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 28.97% on 18-09-2026
18-09-202618-10-2026
EPSS score28.97%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat6 products
- net-snmp< 0:5.0.9-2.30E.23 | < 0:5.1.2-11.el4_6.11.1 | < 1:5.3.1-19.el5_1.1
- net-snmp-debuginfo< 0:5.0.9-2.30E.23 | < 0:5.1.2-11.el4_6.11.1 | < 1:5.3.1-19.el5_1.1
- net-snmp-devel< 0:5.0.9-2.30E.23 | < 0:5.1.2-11.el4_6.11.1 | < 1:5.3.1-19.el5_1.1
- net-snmp-libs< 0:5.0.9-2.30E.23 | < 0:5.1.2-11.el4_6.11.1 | < 1:5.3.1-19.el5_1.1
- net-snmp-perl< 0:5.0.9-2.30E.23 | < 0:5.1.2-11.el4_6.11.1 | < 1:5.3.1-19.el5_1.1
Debian1 product
- net-snmp< 5.4.1~dfsg-1 | < 5.3.1-8+lenny1 | < 5.2.3-7etch2
Net-snmp1 product
- net-snmp≤ 5.4.1
3 vendors · 8 products
References
37 links- sourceforge.net/project/shownotes.php?release_id=528095&group_id=12694X Refsource CONFIRM
Show all 37 references
- bugs.gentoo.org/show_bug.cgi?id=198346X Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00613.htmlVendor AdvisoryX Refsource FEDORA
- kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11258VDB EntrySignatureX Refsource OVAL