Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:0768

Опубликовано: 12 мар. 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: libmaxminddb security update

The libmaxminddb package contains the MaxMind DB library.

Security Fix(es):

  • libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
libmaxminddbx86_6410.el8_9.1libmaxminddb-1.2.0-10.el8_9.1.x86_64.rpm
libmaxminddb-develx86_6410.el8_9.1libmaxminddb-devel-1.2.0-10.el8_9.1.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 5 лет назад

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

CVSS3: 6.5
redhat
около 5 лет назад

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

CVSS3: 6.5
nvd
почти 5 лет назад

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

CVSS3: 6.5
debian
почти 5 лет назад

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_en ...

github
около 3 лет назад

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.