ALT-PU-2020-2831-1
Package libmaxminddb updated to version 1.4.3-alt1 for branch sisyphus in task 258197.
Closed vulnerabilities
Published: 2020-11-06
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
Severity: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- https://github.com/maxmind/libmaxminddb/compare/1.4.2...1.4.3
- https://github.com/maxmind/libmaxminddb/compare/1.4.2...1.4.3
- https://github.com/maxmind/libmaxminddb/issues/236
- https://github.com/maxmind/libmaxminddb/issues/236
- https://github.com/maxmind/libmaxminddb/pull/237
- https://github.com/maxmind/libmaxminddb/pull/237
- [debian-lts-announce] 20201110 [SECURITY] [DLA 2445-1] libmaxminddb security update
- [debian-lts-announce] 20201110 [SECURITY] [DLA 2445-1] libmaxminddb security update
- FEDORA-2020-8a8f8b244f
- FEDORA-2020-8a8f8b244f
- FEDORA-2020-1fb1785fa1
- FEDORA-2020-1fb1785fa1
- GLSA-202011-15
- GLSA-202011-15