CVE-2002-1570: Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attacker

Q: How do I fix CVE-2002-1570?

ucd-snmp: upgrade to newer than 4.2.3. Exact commands for each OS are on this page.

Q: Is CVE-2002-1570 being exploited?

CVE-2002-1570 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2002-1570 affect?

CVE-2002-1570 affects ucd-snmp. Severity is high (CVSS 7.5). Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat t

Q: How urgent is CVE-2002-1570?

Priority 54/100. High severity; EPSS top 7%: very likely to be exploited; Public exploit reference

This month

HIGH 7.5UPGRADE

CVE-2002-1570 is a high-severity flaw (CVSS 7.5) affecting ucd-snmp. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.

Why this priority

High severity
EPSS top 7%: very likely to be exploited
Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score	7.5 (High)
EPSS exploit chance	5.7% (top 7%)
CISA exploited list	No
Published	2003-11-03
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: ucd-snmp

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2003-11-03 05:00 UTCPublished CVE record published
2026-06-16 21:59 UTCUpdated Record last modified

ucd-snmp ucd-snmp UPGRADE

Affected: <= 4.2.3

Fixed in: newer than 4.2.3

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy ucd-snmp || rpm -q ucd-snmp || ucd-snmp --version

2. UPGRADE to newer than 4.2.3 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade ucd-snmp

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade ucd-snmp

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Exploit-DB: Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2002-1570?

ucd-snmp: upgrade to newer than 4.2.3. Exact commands for each OS are on this page.

Is CVE-2002-1570 being exploited?

CVE-2002-1570 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2002-1570 affect?

CVE-2002-1570 affects ucd-snmp. Severity is high (CVSS 7.5). Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat t

How urgent is CVE-2002-1570?

Priority 54/100. High severity; EPSS top 7%: very likely to be exploited; Public exploit reference

Related CVEs

CVE-2004-2300 HIGH 7.2 UPGRADE Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to exec

References

← Back to latest CVEs