Skip to content

PatchFirst · Latest vulnerabilities

libsmi vulnerabilities

Vulnerabilities published for libsmi in the last 30 days: 1. Listed in the KEV catalogue: 0.

Vulnerabilities: 2

CVE-2026-111137
Medium · CVSS 6.9EPSS 0.13%No fix published
libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets and a leading 0x00 byte to corrupt adjacent library globals and crash smidump or other consumers.
libsmi Operating systems
Published October 15, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2010-2891
Not ratedEPSS 14.04%Public exploitFix available
CVE-2010-2891
Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.
libsmi Operating systems
- Update to 0.4.8+dfsg2-3
Published October 27, 2010Updated August 7, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →