MGASA-2015-0187
Updated net-snmp packages fix security vulnerabilities
Updated net-snmp packages fix security vulnerability:
It was discovered that the snmp_pdu_parse() function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code.
What each source reports
OSV No score
Updated net-snmp packages fix security vulnerabilities
Updated net-snmp packages fix security vulnerability:
It was discovered that the snmp_pdu_parse() function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code.
- Record
MGASA-2015-0187- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
net-snmpMageia:4 |
before 5.7.2-13.3.mga4 | 5.7.2-13.3.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0187 is a vulnerability with no CVSS score yet in net-snmp, published May 5, 2015. No source lists public exploit code. Fixed in net-snmp 5.7.2-13.3.mga4.