CVE-2020-6060

Mini-SNMPD 1.4 is affected by a stack-based buffer overflow when handling multiple connections due to flawed socket list cleanup that can leave a -1 fd and trigger a process crash via FD_SET in select loops. TALOS advisories detail an exploit path and crash conditions, confirming the vulnerabilit...

CVE-2020-6059

Mini-SNMPD 1.4 is affected by an exploitable out-of-bounds read in the SNMP packet decoder (decode_int). The flaw can lead to disclosure of sensitive information and a denial of service when a specially crafted SNMP request is processed, due to improper handling of length fields that may read pas...

CVE-2020-6059

An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this...

CVE-2020-6060

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate multiple...

CVE-2020-6058

An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger this...

CVE-2020-6060

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate multiple...

PT-2020-18900

Name of the Vulnerable Software and Affected Versions MiniSNMPD version 1.4 Description An out of bounds read issue exists in the way MiniSNMPD parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read, potentially resulting in sensitive information...

CVE-2020-6060: Out-of-bounds Write

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate multiple...

PT-2020-18899

Name of the Vulnerable Software and Affected Versions MiniSNMPD version 1.4 Description An out-of-bounds read issue exists in the way MiniSNMPD parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, resulting in the disclosure of sensitive...

PT-2020-18901

Name of the Vulnerable Software and Affected Versions MiniSNMPD version 1.4 Description A stack buffer overflow issue exists in the way MiniSNMPD handles multiple connections. This can be triggered by a specially timed sequence of SNMP connections, resulting in a denial of service. An attacker ca...

CVE-2020-6059: Integer Overflow or Wraparound

An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this...

CVE-2020-6058: Out-of-bounds Read

An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger this...