Vulnerabilities in Mini-SNMPD Lead to DoS, Information Disclosure

guest · Feb 4, 2020

Vulnerabilities in Mini-SNMPD Lead to DoS, Information Disclosure
February 4, 2020
https://www.securityweek.com/vulnerabilities-mini-snmpd-lead-dos-information-disclosure

Mini-SNMPD is a lightweight implementation of a Simple Network Management Protocol server, mainly targeted at embedded systems, courtesy of its small code size and memory footprint. It works on both x86 and ARM platforms running Ubuntu, Alpine Linux, and FreeBSD.

Talos’ researchers discovered a total of three vulnerabilities in Mini-SNMPD, including two out-of-bounds read bugs and one stack overflow.
Tracked as CVE-2020-6058 and CVE-2020-6059, the first two issues are exploitable out-of-bounds read vulnerabilities, both related to the manner in which Mini-SNMPD parses incoming SNMP packets.

They have been patched with the release of Mini-SNMPD version 1.5.
Click to expand...

Cisco Talos: Vulnerability Spotlight: Denial-of-service, information leak bugs in Mini-SNMPD

Log in or Sign up

Vulnerabilities in Mini-SNMPD Lead to DoS, Information Disclosure

guest Guest

Log in or Sign up

Vulnerabilities in Mini-SNMPD Lead to DoS, Information Disclosure

guest Guest

Useful Searches