CVE-2012-2141
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in...
CVE-2012-2141 is a low vulnerability (CVSS 3.5) in Net-snmp, published August 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.17%, the 82nd percentile. Fixed in net-snmp 5.4.3~dfsg-2.5.
- Severity
- 3.5 LowCVSS 2.0, NVD
- Exploit chance
- 2.17%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.4.3~dfsg-2.5net-snmp +45 more
Description
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
net-snmpDebian:12 | before 5.4.3~dfsg-2.5 | 5.4.3~dfsg-2.5 |
net-snmpDebian:13 | before 5.4.3~dfsg-2.5 | 5.4.3~dfsg-2.5 |
net-snmpDebian:14 | before 5.4.3~dfsg-2.5 | 5.4.3~dfsg-2.5 |
net-snmpRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-develRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-perlRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-pythonRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-utilsRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-libsRed Hat:enterprise_linux:6::client | before 1:5.5-41.el6 | 1:5.5-41.el6 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
net-snmpRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-develRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-libsRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-perlRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-pythonRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-utilsRed Hat:enterprise_linux:6::computenode | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmpRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-develRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-libsRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-perlRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-pythonRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-utilsRed Hat:enterprise_linux:6::server | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmpRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-debuginfoRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-develRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-libsRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-perlRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-pythonRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmp-utilsRed Hat:enterprise_linux:6::workstation | before 1:5.5-41.el6 | 1:5.5-41.el6 |
net-snmpRed Hat:enterprise_linux:5::client_workstation | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-debuginfoRed Hat:enterprise_linux:5::client_workstation | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-develRed Hat:enterprise_linux:5::client_workstation | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmpRed Hat:enterprise_linux:5::client | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-debuginfoRed Hat:enterprise_linux:5::client | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-libsRed Hat:enterprise_linux:5::client | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-perlRed Hat:enterprise_linux:5::client | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-utilsRed Hat:enterprise_linux:5::client | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmpRed Hat:enterprise_linux:5::server | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-debuginfoRed Hat:enterprise_linux:5::server | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-develRed Hat:enterprise_linux:5::server | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-libsRed Hat:enterprise_linux:5::server | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-perlRed Hat:enterprise_linux:5::server | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmp-utilsRed Hat:enterprise_linux:5::server | before 1:5.3.2.2-20.el5 | 1:5.3.2.2-20.el5 |
net-snmpopenSUSE:Tumbleweed From an advisory covering 5 CVEs | before 5.7.3-8.4 | 5.7.3-8.4 |
What each source reports
NVD Score used
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
- Record
CVE-2012-2141- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
- Record
CVE-2012-2141- Updated
- 2026-11-02
EUVDEUVD-2012-2138No score
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
- Record
EUVD-2012-2138- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qx3h-g3gw-6vrxNo score
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in...
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
- Record
GHSA-qx3h-g3gw-6vrx- Updated
- 2026-11-02
OSVNo score
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
- Record
CVE-2012-2141- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2141No score
Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
- Record
DEBIAN-CVE-2012-2141- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10204-1No score
libsnmp30-32bit-5.7.3-8.4 on GA media
These are all security issues fixed in the libsnmp30-32bit-5.7.3-8.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10204-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2012/04/26/3
rhn.redhat.com/errata/RHSA-2013-0124.html
exchange.xforce.ibmcloud.com/vulnerabilities/75169
securitytracker.com/id?1026984
secunia.com/advisories/59974
support.citrix.com/article/CTX139049
Show 33 moreShow less
gentoo.org/security/en/glsa/glsa-201409-02.xml
securityfocus.com/bid/53258
bugzilla.redhat.com/show_bug.cgi?id=815813
nvd.nist.gov/vuln/detail/CVE-2012-2141
github.com/advisories/GHSA-qx3h-g3gw-6vrx
security-tracker.debian.org/tracker/CVE-2012-2141
access.redhat.com/errata/RHSA-2012:0876
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/net-snmp.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0876.json
cve.org/CVERecord?id=CVE-2012-2141
suse.com/security/cve/CVE-2012-2141