{"id":"CVE-2019-20795","revision":"5fdb600870674e7092a2493b203a82e6","records":[{"revision":"5fdb600870674e7092a2493b203a82e6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-20795","aliases":[],"title":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. …","description":"iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.","state":0,"publishedAt":"2020-05-09T20:16:02+00:00","modifiedAt":"2026-10-14T07:57:13.605+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=9bf2c538a0eb10d66e2365a655bf6c52f5ba3d10","https://bugzilla.suse.com/show_bug.cgi?id=1171452","https://usn.ubuntu.com/4357-1/","https://security.gentoo.org/glsa/202008-06"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-20795","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-20795","identifiers":["CVE-2019-20795"]},"retained":false,"historicalAffected":[]}],"coverage":[]}