Most recent entries from all

ALSA-2024:0768 — Moderate: libmaxminddb security update

Affected: AlmaLinux:8: libmaxminddb, AlmaLinux:8: libmaxminddb-devel

The libmaxminddb package contains the MaxMind DB library.

Security Fix(es):

* libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn: BELL-CVE-2020-28241 — CVE-2020-28241 does not affect BellSoft software

Withdrawn by the publisher.

BIT-libmaxminddb-2020-28241

Affected: Bitnami: libmaxminddb

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

certfr-2024-avi-0305 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

certfr-2024-avi-0305

cnvd-2020-68258

EUVD-2026-46957

fkie_cve-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

GHSA-8h2q-prr9-7wh9

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

gsd-2020-28241

OESA-2021-1287 — libmaxminddb security update

Affected: openEuler:20.03-LTS-SP1: libmaxminddb, openEuler:20.03-LTS-SP2: libmaxminddb

The libmaxminddb library provides a C library for reading MaxMind DB files, including the GeoIP2 databases from MaxMind. This is a custom binary format designed to facilitate fast lookups of IP addresses while allowing for great flexibility in the type of data associated with an address. Security Fix(es): libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.(CVE-2020-28241)

RHSA-2024:0750 — Red Hat Security Advisory: libmaxminddb security update

libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c

RHSA-2024:0768 — Red Hat Security Advisory: libmaxminddb security update

libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c

UBUNTU-CVE-2020-28241

Affected: Ubuntu:Pro:16.04:LTS: libmaxminddb, Ubuntu:18.04:LTS: libmaxminddb, Ubuntu:20.04:LTS: libmaxminddb

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

WID-SEC-W-2024-0333 — Red Hat Enterprise Linux (libmaxminddb): Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in "libmaxminddb" ausnutzen, um einen Denial of Service Angriff durchzuführen.