CVE-2019-20892: Double Free
Last updated 25 August 2025
Other sources
net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-20892?
CVE-2019-20892 is a vulnerability in net-snmp before 5.8.1.pre1 that allows for a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request.
How does CVE-2019-20892 affect net-snmp?
CVE-2019-20892 affects net-snmp packages shipped to end users by multiple Linux distributions, but it might not affect an upstream release.
What is the severity of CVE-2019-20892?
CVE-2019-20892 has a severity level of medium with a CVSS score of 6.5.
How can I fix CVE-2019-20892?
To fix CVE-2019-20892, users should update to net-snmp version 5.8.1.pre1 or later.
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-20892?
CVE-2019-20892 is associated with CWE-415, which is a double free vulnerability.