Net-SNMP Buffer Overflow Vulnerability in snmptrapd Daemon Leading to Crash

A buffer overflow vulnerability has been identified in the Net-SNMP snmptrapd daemon, all versions prior to 5.9.5 and 5.10.pre2. This vulnerability allows a specially crafted packet to cause the daemon to crash. The issue has been patched in versions 5.9.5 and 5.10.pre2.

Impact

Exploitation of this vulnerability leads to a buffer overflow, causing the snmptrapd daemon to crash.

Remediation

Users of the Net-SNMP snmptrapd daemon should upgrade to version 5.9.5 or 5.10.pre2. Additionally, ensure that SNMP ports are not open to public networks, and firewall ports to snmptrapd appropriately.