CVE-2005-2177: Net-SNMP

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.

Affected products

• Net-SNMP Net-SNMP: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4_pre2 only; version 5.0.5 only; …

Published 2005-07-11. Last modified 2026-06-16.