Debian/net-snmp: medium 6.5
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Lin
Action: Upgrade net-snmp to 5.8+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.8+dfsg-3 | - |
Fixed versions
| 5.8+dfsg-3 |
Sources
- osv: DEBIAN-CVE-2019-20892#Debian:13/net-snmp
- https://security-tracker.debian.org/tracker/CVE-2019-20892
published · modified · JSON