CVE-2019-20892

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request

published June 25, 2020

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02315 · 83.3th percentile
Published
2020-06-25T09:07Z
EPSS history
Timeline
  • 25 JUN 09:07Z
    net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request
    cvelistv5