Skip to content
Fencer Vulns
high 7.8

CVE-2007-5846 in the critical feed json

The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) vi…

published 2007-11-06 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-5816

cvss
7.8
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
29.2%
EPSS 29.2% chance of exploitation in 30 days, percentile 98%
public exploits
0
none known

Summary

The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.

Patch / fix

  • net-snmp Debian 14, Debian 13, Debian 12 5.4.1~dfsg-1

debian advisories DEBIAN-CVE-2007-5846

  • net-snmp RHEL 3 5.0.9-2.30E.23
  • net-snmp RHEL 4 5.1.2-11.el4_6.11.1
  • net-snmp RHEL 5 1:5.3.1-19.el5_1.1
  • net-snmp-libs RHEL 3 5.0.9-2.30E.23
  • net-snmp-libs RHEL 4 5.1.2-11.el4_6.11.1
  • net-snmp-libs RHEL 5 1:5.3.1-19.el5_1.1
  • net-snmp-perl RHEL 3 5.0.9-2.30E.23
  • net-snmp-perl RHEL 4 5.1.2-11.el4_6.11.1

red hat advisories RHSA-2007:1045

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2007-5846 updated

net-snmp remote DoS via udp packet

  • Red Hat Desktop version 3 net-snmp 5.0.9-2.30E.23, net-snmp-libs 5.0.9-2.30E.23, net-snmp-perl 5.0.9-2.30E.23, net-snmp-utils 5.0.9-2.30E.23 Red Hat Enterprise Linux (v. 5 server) net-snmp 5.3.1-19.el5_1.1, net-snmp-libs 5.3.1-19.el5_1.1, net-snmp-perl 5.3.1-19.el5_1.1, net-snmp-utils 5.3.1-19.el5_1.1 Red Hat Enterprise Linux AS version 3 net-snmp 5.0.9-2.30E.23, net-snmp-libs 5.0.9-2.30E.23, net-snmp-perl 5.0.9-2.30E.23, net-snmp-utils 5.0.9-2.30E.23 Red Hat Enterprise Linux AS version 4 net-snmp 5.1.2-11.el4_6.11.1, net-snmp-libs 5.1.2-11.el4_6.11.1, net-snmp-perl 5.1.2-11.el4_6.11.1, net-snmp-utils 5.1.2-11.el4_6.11.1 Red Hat Enterprise Linux Desktop (v. 5 client) net-snmp 5.3.1-19.el5_1.1, net-snmp-libs 5.3.1-19.el5_1.1, net-snmp-perl 5.3.1-19.el5_1.1, net-snmp-utils 5.3.1-19.el5_1.1 Red Hat Enterprise Linux Desktop version 4 net-snmp 5.1.2-11.el4_6.11.1, net-snmp-libs 5.1.2-11.el4_6.11.1, net-snmp-perl 5.1.2-11.el4_6.11.1, net-snmp-utils 5.1.2-11.el4_6.11.1
    +5 more products
    Red Hat Enterprise Linux Desktop Workstation (v. 5 client) net-snmp 5.3.1-19.el5_1.1, net-snmp-libs 5.3.1-19.el5_1.1, net-snmp-perl 5.3.1-19.el5_1.1, net-snmp-utils 5.3.1-19.el5_1.1 Red Hat Enterprise Linux ES version 3 net-snmp 5.0.9-2.30E.23, net-snmp-libs 5.0.9-2.30E.23, net-snmp-perl 5.0.9-2.30E.23, net-snmp-utils 5.0.9-2.30E.23 Red Hat Enterprise Linux ES version 4 net-snmp 5.1.2-11.el4_6.11.1, net-snmp-libs 5.1.2-11.el4_6.11.1, net-snmp-perl 5.1.2-11.el4_6.11.1, net-snmp-utils 5.1.2-11.el4_6.11.1 Red Hat Enterprise Linux WS version 3 net-snmp 5.0.9-2.30E.23, net-snmp-libs 5.0.9-2.30E.23, net-snmp-perl 5.0.9-2.30E.23, net-snmp-utils 5.0.9-2.30E.23 Red Hat Enterprise Linux WS version 4 net-snmp 5.1.2-11.el4_6.11.1, net-snmp-libs 5.1.2-11.el4_6.11.1, net-snmp-perl 5.1.2-11.el4_6.11.1, net-snmp-utils 5.1.2-11.el4_6.11.1
    fixed: vendor fix RHSA-2007:1045

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-23-047-02 updated cvss 7.5

Siemens SCALANCE X200 IRT

  • Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) <V5.5.0 Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) <V5.5.0 Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6) <V5.5.0 Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) <V5.5.0 Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) <V5.5.0 Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) <V5.5.0
    +7 more products
    Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3) <V5.5.0 Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) <V5.5.0 Siemens SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2) <V5.5.0 Siemens SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2) <V5.5.0 Siemens SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2) <V5.5.0 Siemens SCALANCE XF204IRT (6GK5204-0BA00-2BF2) <V5.5.0 Siemens SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3) <V5.5.0
    affected: fixed in V5.5.0, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

29.18% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 2.0 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness
  • CWE-399 Resource Management Errors

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.