CVE-2005-2177

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-07-11 · updated 2026-06-16
Weakness: CWE-20

Description

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.

Affected products

net-snmp: 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4_pre2, 5.0.5 (+8)

References

http://secunia.com/advisories/15930
http://secunia.com/advisories/16999
http://secunia.com/advisories/17007
http://secunia.com/advisories/17135
http://secunia.com/advisories/17217
http://secunia.com/advisories/17282
http://secunia.com/advisories/17343
http://secunia.com/advisories/18635
http://secunia.com/advisories/22875
http://secunia.com/advisories/23058
http://secunia.com/advisories/25373
http://secunia.com/advisories/25432

Get alerted when CVE-2005-2177 or the next vulnerability affects your stack