Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Minisnmpd Project Subscribe
Filtered by product Minisnmpd
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-6060 1 Minisnmpd Project 1 Minisnmpd 2022-06-07 5.0 MEDIUM 7.5 HIGH
A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate multiple connections to the server.
CVE-2020-6059 1 Minisnmpd Project 1 Minisnmpd 2022-06-07 6.4 MEDIUM 8.2 HIGH
An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server.
CVE-2020-6058 1 Minisnmpd Project 1 Minisnmpd 2022-06-07 6.4 MEDIUM 9.1 CRITICAL
An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server.