net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade net-snmp | Oct 1, 2024 | Jun 25, 2020 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Jun 25, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 3, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Aug 27, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp-develUpgrade net-snmp | Nov 3, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-devel | Sep 28, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-utils | Nov 2, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmp | Jul 31, 2020 | Jun 25, 2020 |
| Oracle Solaris | — | Upgrade library/python/net-snmp-37 to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade legacy/library/python/net-snmp-27 to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/demo to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/addons to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 25, 2020 |
| Ubuntu | — | Upgrade libsnmp-perlUpgrade libsnmp35Upgrade libsnmp-baseUpgrade snmpd | Aug 5, 2020 | Jun 25, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub