Lucene search
Veracode Vulnerability DatabaseVERACODE:28857HistoryDec 30, 2020 - 4:52 p.m.
Denial Of Service (DoS)
2020-12-3016:52:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
libmaxminddb
denial of service
heap-based buffer over-read
maxminddb.c
crash
application
software
EPSS
0.004
Percentile
73.2%
libmaxminddb is vulnerable to denial of service. A heap-based buffer over-read in dump_entry_data_list in maxminddb.c allows an attacker to crash the application.
References
github.com/maxmind/libmaxminddb/compare/1.4.2...1.4.3
github.com/maxmind/libmaxminddb/issues/236
github.com/maxmind/libmaxminddb/pull/237
lists.debian.org/debian-lts-announce/2020/11/msg00019.html
lists.fedoraproject.org/archives/list/[email protected]/message/6WUK4UCOB5FJVK36E22IRLEYGKMUWGBG/
lists.fedoraproject.org/archives/list/[email protected]/message/ELTOHZBPO6XVUVADP4DPZBNQCPTYOQBV/
secdb.alpinelinux.org/v3.10/main.yaml
secdb.alpinelinux.org/v3.11/main.yaml
secdb.alpinelinux.org/v3.12/main.yaml
security.gentoo.org/glsa/202011-15
Related
ubuntucve
ubuntucve
CVE-2020-28241
2020-11-06 00:00:00
redhat
redhat
(RHSA-2024:0751) Moderate: libmaxminddb security update
2024-02-08 17:22:47
(RHSA-2024:0768) Moderate: libmaxminddb security update
2024-02-12 00:07:01
(RHSA-2024:0750) Moderate: libmaxminddb security update
2024-02-08 17:22:37
nessus
nessus
CentOS 8 : libmaxminddb (CESA-2024:0768)
2024-02-12 00:00:00
Oracle Linux 8 : libmaxminddb (ELSA-2024-0768)
2024-02-12 00:00:00
RHEL 8 : libmaxminddb (RHSA-2024:0750)
2024-02-09 00:00:00
osv
osv
Moderate: libmaxminddb security update
2024-02-12 00:00:00
CVE-2020-28241
2020-11-06 05:15:10
libmaxminddb vulnerability
2020-11-12 13:31:09
openvas
openvas
Huawei EulerOS: Security Advisory for libmaxminddb (EulerOS-SA-2021-1152)
2021-02-02 00:00:00
Fedora: Security Advisory for libmaxminddb (FEDORA-2020-1fb1785fa1)
2020-12-26 00:00:00
Debian: Security Advisory (DLA-2445-1)
2020-11-11 00:00:00
gentoo
gentoo
libmaxminddb: Denial of service
2020-11-14 00:00:00
mageia
mageia
Updated libmaxminddb packages fix security vulnerability
2020-12-28 22:09:43
cvelist
cvelist
CVE-2020-28241
2020-11-06 04:43:12
cve
cve
CVE-2020-28241
2020-11-06 05:15:10
ubuntu
ubuntu
libmaxminddb vulnerability
2020-11-12 00:00:00
libmaxminddb vulnerability
2022-11-30 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: libmaxminddb-1.4.3-1.fc32
2020-12-26 01:19:00
[SECURITY] Fedora 33 Update: libmaxminddb-1.4.3-1.fc33
2020-12-26 01:37:30
prion
prion
Heap overflow
2020-11-06 05:15:00
debiancve
debiancve
CVE-2020-28241
2020-11-06 05:15:10
alpinelinux
alpinelinux
CVE-2020-28241
2020-11-06 05:15:10
almalinux
almalinux
Moderate: libmaxminddb security update
2024-02-12 00:00:00
rocky
rocky
libmaxminddb security update
2024-03-12 15:41:47
nvd
nvd
CVE-2020-28241
2020-11-06 05:15:10
debian
debian
[SECURITY] [DLA 2445-1] libmaxminddb security update
2020-11-10 18:25:00
redhatcve
redhatcve
CVE-2020-28241
2020-11-06 14:59:19
oraclelinux
oraclelinux
libmaxminddb security update
2024-02-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2323
2024-01-09 10:03:06
