CVE-2020-6058

State
Published
Severity
8.2 High
Published
Feb 4, 2020
Updated
Aug 4, 2024
Reserved
Jan 7, 2020

Read the record on cve.org

Description

An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server.

Scores

CVSSScoreVectorSource
3.08.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Htalos

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Mini-SNMPDn/a
  • Mini-SNMPD 1.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.