We found one bug in snmp by fuzzing. Here is the vulnerability info
and poc. Please assist us to get the cve number, it is very important
to us.

  Discover: Yingchao Yu, Shibin Zhao, Chiheng Wang

  The vulnerability is in the net-snmp/snmplib/mib.c. Agentxtrap calls
strdup() in read_objid() to put unparsed oid data on heap, then calls
_add_strings_to_oid() to parse.

  [image: image.png]

  There is a heap out-of-bounds read vulnerability in
_add_strings_to_oid(), because when the single quote at the end of the
string is not closed, the parsing will cause the subsequent cp2
pointer to read the heap area after the first strdup.

 [image: image.png]

  poc: