CVE-2020-6059

Katalog CVE

CVSS 8.2 · High EPSS 2,6%

Kerentanan Integer Overflow or Wraparound pada minisnmpd project minisnmpd. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server.

Rincian

Terbit di NVD

4 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0976 broken link · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-0976 exploit · advisory pihak ketiga