OSV-2025-119

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/net-snmp/OSV-2025-119.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-119
Published
2025-02-14T00:15:08Z
Modified
2025-03-18T00:37:43Z
Summary
Heap-buffer-overflow in snmp_config_when
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396102403

Crash type: Heap-buffer-overflow READ 1
Crash state:
snmp_config_when
netsnmp_config_process_memory_list
read_premib_configs
References

Affected packages

OSS-Fuzz / net-snmp

Package

Name
net-snmp
Purl
pkg:generic/net-snmp

Affected ranges

Type
GIT
Repo
https://github.com/net-snmp/net-snmp
Events
Introduced
a6d63f416b3fe3011a3d11559ddf29ecf01a1667
Fixed
50d5c3d007cf9b4f56a29b79a8a2e736115eb6cb
Fixed
0eeb1c0b18d1b5ea594c1e2300725977c7dcf20c
Fixed
9c2aeb5cb12a75f366303623c522f6ed72afd944

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"f720ed11acffa6425694ee3ac5144035aa094716:0eeb1c0b18d1b5ea594c1e2300725977c7dcf20c"
introduced_range 
"1109b6fd408e1c8b03e6ccfdcbe70c2ad0412c13:f720ed11acffa6425694ee3ac5144035aa094716"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/net-snmp/OSV-2025-119.yaml"