Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-20892 →
DEBIAN-CVE-2019-20892
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
net-snmp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8+dfsg-3"}]}]
Debian:13
net-snmp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8+dfsg-3"}]}]
Debian:14
net-snmp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8+dfsg-3"}]}]
Références
- advisory security-tracker.debian.org