USN-4410-1

Source
https://ubuntu.com/security/notices/USN-4410-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4410-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-4410-1
Related
Published
2020-07-02T19:23:37.105464Z
Modified
2020-07-02T19:23:37.105464Z
Summary
net-snmp vulnerability
Details

A double-free bug was discovered in snmpd server. An authenticated user could potentially cause a DoS by sending a crafted request to the server. (CVE-2019-20892)

References

Affected packages

Ubuntu:20.04:LTS / net-snmp

Package

Name
net-snmp
Purl
pkg:deb/ubuntu/net-snmp?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.8+dfsg-2ubuntu2.1

Affected versions

5.*

5.7.3+dfsg-5ubuntu5
5.7.3+dfsg-5ubuntu6
5.8+dfsg-2ubuntu1
5.8+dfsg-2ubuntu2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "libsnmp-base"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "libsnmp-dev"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "libsnmp-perl"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "libsnmp-perl-dbgsym"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "libsnmp35"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "libsnmp35-dbg"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "snmp"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "snmp-dbgsym"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "snmpd"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "snmpd-dbgsym"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "snmptrapd"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "snmptrapd-dbgsym"
        },
        {
            "binary_version": "5.8+dfsg-2ubuntu2.1",
            "binary_name": "tkmib"
        }
    ]
}