ZeroDay Findings
Sign inSign up

Findings

CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.

Published May 9, 2020 · updated Oct 14, 2026 · iproute2 project iproute2

iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.

Timeline

Detection, updates, and resolution for this record.

  1. May 9, 2020 · NIST NVD

    Detected

    iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.

  2. Oct 14, 2026 · NIST NVD

    Updated

    iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.

Affected

  • cpe canonical/ubuntu linux18.04
  • cpe iproute2 project/iproute2version unspecified

Sources

  • CVE.orgCVE-2019-20795

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-20795

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDCVE-2019-20795

    iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors

    nvd.nist.gov

References