CVE-2020-6059 — HIGH (8.2) — White Hats Nepal

Vulnerability Description

An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Minisnmpd Project	Minisnmpd	1.4

Related Weaknesses (CWE)

CWE-190

References

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0976Broken LinkThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-0976ExploitThird Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0976Broken LinkThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-0976ExploitThird Party Advisory

FAQ

What is CVE-2020-6059?

CVE-2020-6059 is a vulnerability with a CVSS score of 8.2 (HIGH). An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which ca...

How severe is CVE-2020-6059?

CVE-2020-6059 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-6059?

Check the references section above for vendor advisories and patch information. Affected products include: Minisnmpd Project Minisnmpd.