Alpine/net-snmp: medium 6.5
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Lin
Action: Upgrade net-snmp to 5.8-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.8-r0 | - |
Fixed versions
| 5.8-r0 |
Sources
- osv: ALPINE-CVE-2019-20892#Alpine:v3.12/net-snmp
- https://security.alpinelinux.org/vuln/CVE-2019-20892
published · modified · JSON