CVE-2021-20204

🗓️ 06 May 2021 14:50:52Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 101 Views

A heap memory corruption problem in libgetdata v0.10.0 can be triggered by malicious dirfile databases, leading to arbitrary code execution or privilege escalation

Reporter	Title	Published	Views	Family All 32
attackerkb	CVE-2021-20204	6 May 202115:15	–	attackerkb
BDU FSTEC	GetData DBMS Buffer Overflow DoS	20 Sep 202100:00	–	bdu_fstec
Circl	CVE-2021-20204	7 May 202118:15	–	circl
CNNVD	Homebrew Formulae libgetdata 缓冲区错误漏洞	6 May 202100:00	–	cnnvd
Cvelist	CVE-2021-20204	6 May 202114:50	–	cvelist
Debian	[SECURITY] [DLA 2660-1] libgetdata security update	13 May 202115:00	–	debian
Debian CVE	CVE-2021-20204	6 May 202114:50	–	debiancve
Tenable Nessus	Debian DLA-2660-1 : libgetdata security update	14 May 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : getdata (openSUSE-SU-2021:1645-1)	31 Dec 202100:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-20204	27 Aug 202500:00	–	nessus

NVD

Vulners

Node

getdata_project getdataMatch0.10.0

Node

debian debian_linuxMatch9.0

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "product": "getdata",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v0.10.0"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2021/05/msg00015.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43JTGEMYMCTHD3LHFD7ENBNSWCNBCYEY/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GB7T7DW7XRPJOUE25ZE7GF244FPCHBWY/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OE23HBLIVKVPOQ5MVADWPOCFMREVF4QZ/

17 Jun 2026 03:33Current

8.7High risk

Vulners AI Score8.7

CVSS 27.5

CVSS 3.19.8

EPSS0.02099

SSVC