Security Advisory

CVE-2026-89147

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-11 10:46:56
Last updated 2026-09-11 10:46:56
Assigner VulnCheck
CVSS score 8.7
State PUBLISHED

Description

Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.