{"id":"CVE-2019-20795","aliases":["ALPINE-CVE-2019-20795","BELL-CVE-2019-20795","DEBIAN-CVE-2019-20795","EUVD-2019-11332","GHSA-7x5p-w7r4-hq6m","SUSE-SU-2021:3452-1","UBUNTU-CVE-2019-20795","USN-4357-1"],"status":"published","title":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00406,"percentile":0.35152,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2020-05-09T20:16:02Z","modified":"2026-10-15T07:47:39Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"iproute2","fixed_in":["4.20.0-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"iproute2","fixed_in":["5.1.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"iproute2","fixed_in":["4.19.0-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"iproute2","fixed_in":["5.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"iproute2","fixed_in":["5.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"iproute2","fixed_in":["5.2.0-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"iproute2","fixed_in":["4.12-16.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"iproute2","fixed_in":["4.12-16.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"iproute2","fixed_in":["4.12-16.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"iproute2","fixed_in":["4.15.0-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-16.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-16.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-16.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-2ubuntu1.1"}]}],"versions":["4.9.0-1ubuntu2","4.9.0-1ubuntu3","4.14.1-0ubuntu2","4.14.1-0ubuntu3","4.15.0-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-2ubuntu1.1"}]}],"versions":["4.9.0-1ubuntu2","4.9.0-1ubuntu3","4.14.1-0ubuntu2","4.14.1-0ubuntu3","4.15.0-2ubuntu1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"iproute2_project","product":"iproute2"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=9bf2c538a0eb10d66e2365a655bf6c52f5ba3d10","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1171452","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://usn.ubuntu.com/4357-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202008-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20795"},{"url":"https://usn.ubuntu.com/4357-1"},{"url":"https://github.com/advisories/GHSA-7x5p-w7r4-hq6m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-20795","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-20795","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-20795","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213452-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085669","tags":["report"]},{"url":"https://bugzilla.suse.com/1171452","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20795","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-20795","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4357-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20795","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-20795","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T20:16:02Z","modified":"2026-10-14T07:57:13.605Z","updated_at":"2026-11-02T14:20:17.431882Z"}],"euvd":[{"id":"EUVD-2019-11332","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T20:16:02Z","modified":"2026-10-14T07:57:13Z","updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-7x5p-w7r4-hq6m","title":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.","status":"published","published":"2022-05-24T17:17:32Z","modified":"2026-10-14T09:32:33Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:13:23.530725Z"}],"nvd":[{"id":"CVE-2019-20795","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T21:15:10.913Z","modified":"2026-10-14T08:17:01.427Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:05:46.451008Z"}],"osv":[{"id":"ALPINE-CVE-2019-20795","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T21:15:10.913Z","modified":"2026-09-21T06:17:52.51199777Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-20795","title":"CVE-2019-20795 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:06.788194Z","modified":"2026-01-26T09:47:12.258789Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-20795","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T21:15:10.913Z","modified":"2026-03-14T14:43:07.591315Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-20795","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T21:15:10.913Z","modified":"2026-10-15T07:47:39.766824398Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"UBUNTU-CVE-2019-20795","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","status":"published","published":"2020-05-09T21:15:00Z","modified":"2026-02-04T03:19:07.789569Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"SUSE-SU-2021:3452-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issues:\n\n- CVE-2019-20795: Fixed a use-after-free vulnerability in get_netnsid_from_name. (bsc#1171452)\n","status":"published","published":"2021-10-18T07:29:10Z","modified":"2025-05-02T04:30:11.146088Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-4357-1","title":"iproute2 vulnerability","description":"It was discovered that IPRoute incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2020-05-13T12:09:30Z","modified":"2026-02-10T04:41:49Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}