VULNERABILITY INTELLIGENCE
CVE-2019-20795
CVSS score4.4 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2020-05-09
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Description
iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.
Weakness classification
- CWE-416: Use After Free
Primary references
- cve@mitre.org — Issue Tracking, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e