net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade net-snmp | Oct 1, 2024 | Jun 25, 2020 |
| Debian | — | Upgrade net-snmp | Jul 30, 2024 | Jun 25, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 3, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Aug 27, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp-develUpgrade net-snmp | Nov 3, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-develUpgrade net-snmp-libs | Sep 28, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp | Nov 2, 2020 | Jun 25, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmp-develUpgrade net-snmp-libsUpgrade net-snmp-utilsUpgrade net-snmp-agent-libsUpgrade net-snmp | Jul 31, 2020 | Jun 25, 2020 |
| Oracle Solaris | — | Upgrade system/management/snmp/net-snmp to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/demo to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade legacy/library/python/net-snmp-27 to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/python/net-snmp-37 to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/addons to version 5.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 25, 2020 |
| Ubuntu | — | Upgrade libsnmp-baseUpgrade snmpdUpgrade libsnmp35Upgrade libsnmp-perl | Aug 5, 2020 | Jun 25, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub