← back
CVE-2008-2292

CVE-2008-2292

EPSS 8.4%
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/7100unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.htmlhttp://secunia.com/advisories/30187http://secunia.com/advisories/30615http://secunia.com/advisories/30647http://secunia.com/advisories/31155http://secunia.com/advisories/31334http://secunia.com/advisories/31351http://secunia.com/advisories/31467http://secunia.com/advisories/31568http://secunia.com/advisories/32664http://secunia.com/advisories/33003http://security.gentoo.org/glsa/glsa-200808-02.xml