{"id":"CVE-2026-89147","aliases":["AZL-101742","DEBIAN-CVE-2026-89147","EUVD-2026-76036","GHSA-hv9m-8m5p-82j6","ROOT-OS-ALPINE-323-CVE-2026-89147","UBUNTU-CVE-2026-89147","USN-8997-1"],"status":"published","title":"Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00486,"percentile":0.42172,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1088","CWE-400"],"published":"2026-09-11T10:46:56Z","modified":"2026-11-05T11:58:20Z","fixes":[{"ecosystem":"Debian:14","package":"net-snmp","fixed_in":["5.9.5.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.23","package":"net-snmp","fixed_in":["5.9.5.2-r00071"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.23","package":"rootio-net-snmp","fixed_in":["5.9.5.2-r00071"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"net-snmp","fixed_in":["5.9.1+dfsg-1ubuntu2.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"net-snmp","fixed_in":["5.9.4+dfsg-1.1ubuntu3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"net-snmp","fixed_in":["5.9.4+dfsg-2ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.9.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.3+dfsg-2","5.9.3+dfsg-2+deb12u1","5.9.4+dfsg-1","5.9.4+dfsg-1.1","5.9.4+dfsg-1.1~exp1","5.9.4+dfsg-1.1~exp2","5.9.4+dfsg-2","5.9.5.2+dfsg-1","5.9.5.2+dfsg-2","5.9.5.2+dfsg-2.1","5.9.5.2+dfsg-3"]},{"source":"osv","ecosystem":"Debian:13","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.4+dfsg-2","5.9.4+dfsg-2+deb13u1","5.9.5.2+dfsg-1","5.9.5.2+dfsg-2","5.9.5.2+dfsg-2.1","5.9.5.2+dfsg-3"]},{"source":"osv","ecosystem":"Debian:14","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5.2+dfsg-3"}]}],"versions":["5.9.4+dfsg-2","5.9.5.2+dfsg-1","5.9.5.2+dfsg-2","5.9.5.2+dfsg-2.1"]},{"source":"osv","ecosystem":"Root:Alpine:3.23","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5.2-r00071"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.23","package":"rootio-net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5.2-r00071"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.2~dfsg-8ubuntu1","5.7.2~dfsg-8ubuntu2","5.7.2~dfsg-8.1ubuntu1","5.7.2~dfsg-8.1ubuntu2","5.7.2~dfsg-8.1ubuntu3","5.7.2~dfsg-8.1ubuntu3.1","5.7.2~dfsg-8.1ubuntu3.2","5.7.2~dfsg-8.1ubuntu3.3","5.7.2~dfsg-8.1ubuntu3.3+esm1","5.7.2~dfsg-8.1ubuntu3.3+esm2","5.7.2~dfsg-8.1ubuntu3.3+esm3","5.7.2~dfsg-8.1ubuntu3.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.3+dfsg-1ubuntu2","5.7.3+dfsg-1ubuntu3","5.7.3+dfsg-1ubuntu4","5.7.3+dfsg-1ubuntu4.1","5.7.3+dfsg-1ubuntu4.2","5.7.3+dfsg-1ubuntu4.3","5.7.3+dfsg-1ubuntu4.4","5.7.3+dfsg-1ubuntu4.5","5.7.3+dfsg-1ubuntu4.6","5.7.3+dfsg-1ubuntu4.6+esm1","5.7.3+dfsg-1ubuntu4.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.3+dfsg-1.7ubuntu1","5.7.3+dfsg-1.8ubuntu1","5.7.3+dfsg-1.8ubuntu2","5.7.3+dfsg-1.8ubuntu3","5.7.3+dfsg-1.8ubuntu3.1","5.7.3+dfsg-1.8ubuntu3.2","5.7.3+dfsg-1.8ubuntu3.3","5.7.3+dfsg-1.8ubuntu3.5","5.7.3+dfsg-1.8ubuntu3.6","5.7.3+dfsg-1.8ubuntu3.7","5.7.3+dfsg-1.8ubuntu3.8","5.7.3+dfsg-1.8ubuntu3.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.3+dfsg-5ubuntu5","5.7.3+dfsg-5ubuntu6","5.8+dfsg-2ubuntu1","5.8+dfsg-2ubuntu2","5.8+dfsg-2ubuntu2.1","5.8+dfsg-2ubuntu2.2","5.8+dfsg-2ubuntu2.3","5.8+dfsg-2ubuntu2.4","5.8+dfsg-2ubuntu2.5","5.8+dfsg-2ubuntu2.6","5.8+dfsg-2ubuntu2.7","5.8+dfsg-2ubuntu2.9","5.8+dfsg-2ubuntu2.9+esm1","5.8+dfsg-2ubuntu2.9+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1+dfsg-1ubuntu2.10"}]}],"versions":["5.9+dfsg-3ubuntu2","5.9+dfsg-3ubuntu3","5.9+dfsg-3ubuntu4","5.9.1+dfsg-1ubuntu1","5.9.1+dfsg-1ubuntu2","5.9.1+dfsg-1ubuntu2.1","5.9.1+dfsg-1ubuntu2.2","5.9.1+dfsg-1ubuntu2.4","5.9.1+dfsg-1ubuntu2.5","5.9.1+dfsg-1ubuntu2.6","5.9.1+dfsg-1ubuntu2.7","5.9.1+dfsg-1ubuntu2.8","5.9.1+dfsg-1ubuntu2.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4+dfsg-1.1ubuntu3.3"}]}],"versions":["5.9.3+dfsg-2ubuntu3","5.9.4+dfsg-1ubuntu1","5.9.4+dfsg-1ubuntu2","5.9.4+dfsg-1.1ubuntu2","5.9.4+dfsg-1.1ubuntu3","5.9.4+dfsg-1.1ubuntu3.1","5.9.4+dfsg-1.1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4+dfsg-2ubuntu3.1"}]}],"versions":["5.9.4+dfsg-2ubuntu2","5.9.4+dfsg-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1+dfsg-1ubuntu2.10"}]}],"versions":["5.9+dfsg-3ubuntu2","5.9+dfsg-3ubuntu3","5.9+dfsg-3ubuntu4","5.9.1+dfsg-1ubuntu1","5.9.1+dfsg-1ubuntu2","5.9.1+dfsg-1ubuntu2.1","5.9.1+dfsg-1ubuntu2.2","5.9.1+dfsg-1ubuntu2.4","5.9.1+dfsg-1ubuntu2.5","5.9.1+dfsg-1ubuntu2.6","5.9.1+dfsg-1ubuntu2.7","5.9.1+dfsg-1ubuntu2.8","5.9.1+dfsg-1ubuntu2.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4+dfsg-1.1ubuntu3.3"}]}],"versions":["5.9.3+dfsg-2ubuntu3","5.9.4+dfsg-1ubuntu1","5.9.4+dfsg-1ubuntu2","5.9.4+dfsg-1.1ubuntu2","5.9.4+dfsg-1.1ubuntu3","5.9.4+dfsg-1.1ubuntu3.1","5.9.4+dfsg-1.1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"net-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4+dfsg-2ubuntu3.1"}]}],"versions":["5.9.4+dfsg-2ubuntu2","5.9.4+dfsg-2ubuntu3"]}],"products":[{"vendor":"net-snmp","product":"net-snmp"}],"references":[{"url":"https://gist.github.com/thesmartshadow/001cea595e75fed6aaea7389666dc9eb","tags":["third-party-advisory","exploit","advisory","report"]},{"url":"https://github.com/net-snmp/net-snmp/blob/v5.9.5.2/agent/mibgroup/smux/smux.c","tags":["technical-description","article","report"]},{"url":"https://github.com/net-snmp/net-snmp","tags":["product","package","report"]},{"url":"https://www.vulncheck.com/advisories/net-snmp-through-5.9.5.2-denial-of-service-via-blocking-unauthenticated-smux-read","tags":["third-party-advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89147","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hv9m-8m5p-82j6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89147.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-89147","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-89147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89147","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8997-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-89147","title":"Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T10:46:56.944Z","modified":"2026-09-24T14:21:35.209Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1088","CWE-400"],"updated_at":"2026-11-02T14:19:55.526923Z"}],"euvd":[{"id":"EUVD-2026-76036","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T10:46:56Z","modified":"2026-09-24T14:21:35Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:57.402158Z"}],"ghsa":[{"id":"GHSA-hv9m-8m5p-82j6","title":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where...","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T12:33:25Z","modified":"2026-09-11T12:33:33Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:11:44.427999Z"}],"nvd":[{"id":"CVE-2026-89147","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T11:16:58.04Z","modified":"2026-09-24T20:44:42.207Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400","CWE-1088"],"updated_at":"2026-11-02T14:12:46.271848Z"}],"osv":[{"id":"CVE-2026-89147","title":"Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T10:46:56.944Z","modified":"2026-10-28T02:31:11.237827645Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-1088","CWE-400"],"updated_at":"2026-11-02T15:45:19.210277Z"},{"id":"DEBIAN-CVE-2026-89147","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T11:16:58.04Z","modified":"2026-09-25T08:47:24.832687204Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"UBUNTU-CVE-2026-89147","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T11:16:00Z","modified":"2026-11-05T11:47:37.397872475Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"AZL-101742","title":"CVE-2026-89147 affecting package net-snmp 5.9.5.2-1","description":"Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.","status":"published","published":"2026-09-11T11:16:58Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.128158Z"},{"id":"ROOT-OS-ALPINE-323-CVE-2026-89147","title":"CVE-2026-89147 in net-snmp - Patched by Root","description":"Root has patched CVE-2026-89147 in the net-snmp package for Root:Alpine:3.23. Multiple fixed versions available.","status":"published","published":"2026-09-30T12:46:48Z","modified":"2026-09-30T13:15:02.925305029Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"USN-8997-1","title":"net-snmp vulnerability","description":"It was discovered that Net-SNMP incorrectly handled newly accepted\nconnections in the SMUX module. An unauthenticated remote attacker could\npossibly use this issue to cause Net-SNMP to block indefinitely,\nresulting in a denial of service.","status":"published","published":"2026-11-04T15:25:21Z","modified":"2026-11-05T11:58:20.100218484Z","updated_at":"2026-11-05T13:30:00.949926Z"}]}}