CVE-2019-20892

PoC ×4—

CVSS 3.1

6.5 medium

EPSS

2%p82

Published

Jun 25, 2020 (Jun 25, 2020)

Modified

Jun 17, 2026

Description

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.

Vendors: net-snmp oracle
Products: net-snmp, zfs storage appliance kit
Weakness: CWE-415
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.