CVE-2019-20892
Medium
Description
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Net-snmp
PublishedJun 25, 2020
First seenJun 25, 2020
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| net-snmp net-snmp | v ≤ 5.8 | — |
| oracle zfs_storage_appliance_kit | 8.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.