Vulnerability · Published Feb 4, 2020 · Assigned by talos
CVE-2020-6059
High 8.2
In plain English
A high-severity security flaw in Mini-SNMPD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.0)8.2High
Exploit odds (30 days)2.6%top 14.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Mini-SNMPD | Mini-SNMPD 1.4 |