First published: Thu Jul 02 2020(Updated: )
A double-free bug was discovered in snmpd server. An authenticated user could potentially cause a DoS by sending a crafted request to the server. (CVE-2019-20892)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/libsnmp-base | <5.8+dfsg-2ubuntu2.1 | 5.8+dfsg-2ubuntu2.1 |
Ubuntu | =20.04 | |
All of | ||
ubuntu/libsnmp-perl | <5.8+dfsg-2ubuntu2.1 | 5.8+dfsg-2ubuntu2.1 |
Ubuntu | =20.04 | |
All of | ||
ubuntu/libsnmp35 | <5.8+dfsg-2ubuntu2.1 | 5.8+dfsg-2ubuntu2.1 |
Ubuntu | =20.04 | |
All of | ||
ubuntu/snmpd | <5.8+dfsg-2ubuntu2.1 | 5.8+dfsg-2ubuntu2.1 |
Ubuntu | =20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-4410-1 is classified as high due to the potential for a denial of service (DoS) attack.
To fix USN-4410-1, upgrade the affected packages to version 5.8+dfsg-2ubuntu2.1 or later.
The affected packages in USN-4410-1 include libsnmp-base, libsnmp-perl, libsnmp35, and snmpd for Ubuntu 20.04.
USN-4410-1 describes a double-free bug vulnerability found in the snmpd server.
Authenticated users can exploit the vulnerability in USN-4410-1 by sending crafted requests to the snmpd server.