CVE-2015-5621

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the...

7.5 HighPublic exploitFix available

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

Exploit likelihood

38.3%Up 30.1 points since Feb 4, 2022

What each source reports

CVE List 7.5

Record: CVE-2015-5621
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-190
Updated: 2026-11-02

EUVDEUVD-2015-5573 7.5

Record: EUVD-2015-5573
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w7cc-jv4p-qccr 7.5

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the...

Record: GHSA-w7cc-jv4p-qccr
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-190
Updated: 2026-11-02

NVD 7.5

Record: CVE-2015-5621
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-19, CWE-190
Updated: 2026-11-02

OSVDEBIAN-CVE-2015-5621 7.5

Record: DEBIAN-CVE-2015-5621
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2015:1636 6.5

Red Hat Security Advisory: net-snmp security update

Record: RHSA-2015:1636
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Updated: 2026-11-02

Show 6 moreShow less

OSVUBUNTU-CVE-2015-5621 7.5

Record: UBUNTU-CVE-2015-5621
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV No score

Record: CVE-2015-5621
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10204-1 No score

libsnmp30-32bit-5.7.3-8.4 on GA media

These are all security issues fixed in the libsnmp30-32bit-5.7.3-8.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10204-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1524-1 No score

Security update for net-snmp

net-snmp was updated to fix one security vulnerability and several bugs.

fix a vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621)
Add build requirement 'procps' to fix a net-snmp-config error. (bsc#935863)
add support for /dev/shm in snmp hostmib (bnc#853382, FATE#316893).
stop snmptrapd on package removal.

Record: SUSE-SU-2015:1524-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1556-1 No score

Security update for net-snmp

The following issues have been fixed within this update:

fix btrfs output inside HOST-RESOURCES-MIB::hrStorageDescr. (bsc#909479)
fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bsc#940188, CVE-2015-5621)
add build requirement 'procps' to fix a net-snmp-config error (bsc#935863)
--disable-md5 to allow operation in FIPS mode and not use the old algorithm (bsc#935876 bsc#940084)
also stop snmptrapd on removal

Record: SUSE-SU-2015:1556-1
Updated: 2026-11-02

OSVUSN-2711-1 No score

net-snmp vulnerabilities

It was discovered that Net-SNMP incorrectly handled certain trap messages when the -OQ option was used. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service. (CVE-2014-3565)

Qinghao Tang discovered that Net-SNMP incorrectly handled SNMP PDU parsing failures. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-5621)

Record: USN-2711-1
Updated: 2026-11-02

Affected products

net-snmp

Affected packages

Affected packages
Package	Affected	Fixed
`net-snmp` Debian:12	before 5.7.3+dfsg-1.1	5.7.3+dfsg-1.1
`net-snmp` Debian:13	before 5.7.3+dfsg-1.1	5.7.3+dfsg-1.1
`net-snmp` Debian:14	before 5.7.3+dfsg-1.1	5.7.3+dfsg-1.1
`net-snmp` Debian:7 From an advisory covering 2 CVEs	before 5.4.3~dfsg-2.8+deb7u2, plus listed versions 5.4.3~dfsg-2.75.4.3~dfsg-2.85.4.3~dfsg-2.8+deb7u1	5.4.3~dfsg-2.8+deb7u2
`net-snmp` Debian:8 From an advisory covering 2 CVEs	before 5.7.2.1+dfsg-1+deb8u1, plus listed versions 5.7.2.1+dfsg-1	5.7.2.1+dfsg-1+deb8u1
`net-snmp` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-libs` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-devel` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-perl` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1

Show 79 moreShow less

Affected packages
Package	Affected	Fixed
`net-snmp-python` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-utils` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-libs` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-perl` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-python` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-utils` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-devel` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-libs` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-perl` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-python` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-utils` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-libs` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-perl` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-python` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp-utils` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 1:5.5-54.el6_7.1	1:5.5-54.el6_7.1
`net-snmp` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-agent-libs` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-libs` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-utils` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-devel` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-gui` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-perl` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-python` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-sysvinit` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-agent-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-utils` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-gui` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-perl` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-python` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-sysvinit` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-agent-libs` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-devel` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-libs` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-utils` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-gui` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-perl` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-python` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp-sysvinit` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 1:5.7.2-20.ael7b_1.1	1:5.7.2-20.ael7b_1.1
`net-snmp` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-agent-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-utils` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-gui` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-perl` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-python` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp-sysvinit` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 1:5.7.2-20.el7_1.1	1:5.7.2-20.el7_1.1
`net-snmp` SUSE:Linux Enterprise Software Development Kit 11 SP3	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Software Development Kit 11 SP4	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Desktop 11 SP3	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Desktop 11 SP4	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Server 11 SP3	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Server 11 SP3-TERADATA	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Server for SAP Applications 11 SP3	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Server 11 SP4	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 5.4.2.1-8.12.24.1	5.4.2.1-8.12.24.1
`net-snmp` SUSE:Linux Enterprise Desktop 12	before 5.7.2.1-4.3.2	5.7.2.1-4.3.2
`net-snmp` SUSE:Linux Enterprise Software Development Kit 12	before 5.7.2.1-4.3.2	5.7.2.1-4.3.2
`net-snmp` SUSE:Linux Enterprise Server 12	before 5.7.2.1-4.3.2	5.7.2.1-4.3.2
`net-snmp` SUSE:Linux Enterprise Server for SAP Applications 12	before 5.7.2.1-4.3.2	5.7.2.1-4.3.2
`net-snmp` Ubuntu:14.04:LTS	before 5.7.2~dfsg-8.1ubuntu3.1, plus listed versions 5.7.2~dfsg-8ubuntu15.7.2~dfsg-8ubuntu25.7.2~dfsg-8.1ubuntu15.7.2~dfsg-8.1ubuntu25.7.2~dfsg-8.1ubuntu3	5.7.2~dfsg-8.1ubuntu3.1
`net-snmp` Ubuntu:14.04:LTS From an advisory covering 2 CVEs	before 5.7.2~dfsg-8.1ubuntu3.1, plus listed versions 5.7.2~dfsg-8ubuntu15.7.2~dfsg-8ubuntu25.7.2~dfsg-8.1ubuntu15.7.2~dfsg-8.1ubuntu25.7.2~dfsg-8.1ubuntu3	5.7.2~dfsg-8.1ubuntu3.1
`net-snmp` openSUSE:Tumbleweed From an advisory covering 5 CVEs	before 5.7.3-8.4	5.7.3-8.4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)	2018-10-08

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5621 is a high vulnerability (CVSS 7.5) in Net-snmp, published July 31, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 38.3%, the 98th percentile. Fixed in net-snmp 5.7.3+dfsg-1.1.

References

Show 38 moreShow less