CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.

• CWE-416

• https://bugzilla.suse.com/show_bug.cgi?id=1171452Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=9bf2c538a0eb10d66e2365a655bf6c52f5ba3d10Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202008-06Third Party Advisory
• https://usn.ubuntu.com/4357-1/Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1171452Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=9bf2c538a0eb10d66e2365a655bf6c52f5ba3d10Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202008-06Third Party Advisory
• https://usn.ubuntu.com/4357-1/Third Party Advisory

Published

May 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20789Croogo before 3.0.7 allows XSS via the title to admin/menus/…4.8
• CVE-2019-2079In libxaac, there is a possible out of bounds read due to a …6.5
• CVE-2019-20790OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-…9.8
• CVE-2019-20791OpenThread before 2019-12-13 has a stack-based buffer overfl…9.8
• CVE-2019-20792OpenSC before 0.20.0 has a double free in coolkey_free_priva…6.8
• CVE-2019-20794An issue was discovered in the Linux kernel 4.18 through 5.6…4.7
• CVE-2019-20797An issue was discovered in e6y prboom-plus 2.5.1.5. There is…7.5
• CVE-2019-20798An XSS issue was discovered in handler_server_info.c in Cher…8.4
• CVE-2019-20799In Cherokee through 1.2.104, multiple memory corruption erro…7.5
• CVE-2019-2080In libxaac, there is a possible out of bounds write due to a…8.8
• CVE-2019-20800In Cherokee through 1.2.104, remote attackers can trigger an…9.8
• CVE-2019-20801An issue was discovered in the Readdle Documents app before …5.3