CyberRota Analysis
AI-GeneratedThe SMUX module in Net-SNMP versions up to 5.9.5.2 is vulnerable to a denial of service attack, where an unauthenticated remote client can connect and send no data, leading to an indefinite block in the snmpd main loop. This results in the suspension of all SNMP processing, potentially disrupting network monitoring and management. Organizations using affected versions of Net-SNMP should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.