Every CVE Search/ Get API key

CVE-2014-3565

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers...

5.0 MediumFix available

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Exploit likelihood

4.44%Up 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
CVE-2014-3565
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
CVE-2014-3565
Updated
2026-11-02
EUVDEUVD-2014-3546 No score

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
EUVD-2014-3546
Updated
2026-11-03
GitHub AdvisoriesGHSA-w26p-786m-5h86 No score

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers...

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
GHSA-w26p-786m-5h86
Updated
2026-11-02
OSV No score

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
CVE-2014-3565
Updated
2026-11-02
OSVDEBIAN-CVE-2014-3565 No score

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
DEBIAN-CVE-2014-3565
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0371 No score

Updated net-snmp packages fix CVE-2014-3565

Updated net-snmp packages fix security vulnerabilities:

A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to crash (CVE-2014-3565).

Record
MGASA-2014-0371
Updated
2026-11-02
OSVopenSUSE-SU-2024:10204-1 No score

libsnmp30-32bit-5.7.3-8.4 on GA media

These are all security issues fixed in the libsnmp30-32bit-5.7.3-8.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10204-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-3565 No score

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

Record
UBUNTU-CVE-2014-3565
Updated
2026-11-02
OSVUSN-2711-1 No score

net-snmp vulnerabilities

It was discovered that Net-SNMP incorrectly handled certain trap messages when the -OQ option was used. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service. (CVE-2014-3565)

Qinghao Tang discovered that Net-SNMP incorrectly handled SNMP PDU parsing failures. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-5621)

Record
USN-2711-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
net-snmp
Debian:12
 before 5.7.2.1~dfsg-7
5.7.2.1~dfsg-7
net-snmp
Debian:13
 before 5.7.2.1~dfsg-7
5.7.2.1~dfsg-7
net-snmp
Debian:14
 before 5.7.2.1~dfsg-7
5.7.2.1~dfsg-7
net-snmp
Mageia:3
 before 5.7.2-7.3.mga3
5.7.2-7.3.mga3
net-snmp
Mageia:4
 before 5.7.2-13.2.mga4
5.7.2-13.2.mga4
net-snmp-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-devel
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-perl
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-python
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-utils
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
Show 66 moreShow less
Affected packages
PackageAffectedFixed
net-snmp
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-libs
Red Hat:enterprise_linux:6::client
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-devel
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-libs
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-perl
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-python
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-utils
Red Hat:enterprise_linux:6::computenode
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-devel
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-libs
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-perl
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-python
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-utils
Red Hat:enterprise_linux:6::server
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-devel
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-libs
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-perl
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-python
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-utils
Red Hat:enterprise_linux:6::workstation
 before 1:5.5-54.el6
1:5.5-54.el6
net-snmp-debuginfo
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-devel
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-gui
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-perl
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-python
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-sysvinit
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-agent-libs
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-libs
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-utils
Red Hat:enterprise_linux:7::client
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-devel
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-gui
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-perl
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-python
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-sysvinit
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-agent-libs
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-libs
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-utils
Red Hat:enterprise_linux:7::computenode
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-debuginfo
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-gui
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-perl
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-python
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-sysvinit
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-agent-libs
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-devel
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-libs
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-utils
Red Hat:enterprise_linux:7::server
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-gui
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-perl
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-python
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-sysvinit
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-agent-libs
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-devel
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-libs
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp-utils
Red Hat:enterprise_linux:7::workstation
 before 1:5.7.2-24.el7
1:5.7.2-24.el7
net-snmp
Ubuntu:14.04:LTS
 before 5.7.2~dfsg-8.1ubuntu3.1, plus listed versions
5.7.2~dfsg-8ubuntu15.7.2~dfsg-8ubuntu25.7.2~dfsg-8.1ubuntu15.7.2~dfsg-8.1ubuntu25.7.2~dfsg-8.1ubuntu3
5.7.2~dfsg-8.1ubuntu3.1
net-snmp
Ubuntu:14.04:LTS
From an advisory covering 2 CVEs
 before 5.7.2~dfsg-8.1ubuntu3.1, plus listed versions
5.7.2~dfsg-8ubuntu15.7.2~dfsg-8ubuntu25.7.2~dfsg-8.1ubuntu15.7.2~dfsg-8.1ubuntu25.7.2~dfsg-8.1ubuntu3
5.7.2~dfsg-8.1ubuntu3.1
net-snmp
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 5.7.3-8.4
5.7.3-8.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3565 is a medium vulnerability (CVSS 5.0) in Net-snmp, published September 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.44%, the 91st percentile. Fixed in net-snmp 5.7.2.1~dfsg-7.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open