CVE-2020-6060

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections

High · published February 4, 2020

CVSS v3.0
7.5
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate multiple connections to the server.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02197 · 82.4th percentile
Published
2020-02-04T19:19Z
EPSS history
Timeline
  • 04 FEB 19:19Z
    A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections
    cvelistv5