CVE-2019-20795

low-risk
Published 2020-05-09

iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.

Do I need to act?

-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.4/10 Medium
LOCAL / LOW complexity

Affected Products (2)

Iproute2

Affected Vendors

Canonical Iproute2 Project

References (8)

Issue Tracking https://bugzilla.suse.com/show_bug.cgi?id=1171452
Patch https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=9bf2c538...
Third Party Advisory https://security.gentoo.org/glsa/202008-06
Third Party Advisory https://usn.ubuntu.com/4357-1/
Issue Tracking https://bugzilla.suse.com/show_bug.cgi?id=1171452
Patch https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=9bf2c538...
Third Party Advisory https://security.gentoo.org/glsa/202008-06
Third Party Advisory https://usn.ubuntu.com/4357-1/
22
/ 100
low-risk
Severity 15/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 7/34 · Low