CVE-2021-20204

A heap memory corruption problem (use after free) can be triggered in
libgetdata v0.10.0 when processing maliciously crafted dirfile databases.
This degrades the confidentiality, integrity and availability of
third-party software that uses libgetdata as a library. This vulnerability
may lead to arbitrary code execution or privilege escalation depending on
input/skills of attacker.

Bugs

• <https://bugs.launchpad.net/ubuntu/+source/libgetdata/+bug/1912050&gt;

Notes