Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rosalinuxROSA LABROSA-SA-2024-2323
HistoryJan 09, 2024 - 10:03 a.m.

Advisory ROSA-SA-2024-2323

2024-01-0910:03:06
ROSA LAB
abf.rosalinux.ru
7
advisory
libmaxminddb
heap buffer overflow
fixed
rosa virtualization 2.1
yum update

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON

Software: libmaxminddb 1.2.0
OS: ROSA Virtualization 2.1

package_evr_string: libmaxminddb-1.2.0.0-10.0.1.rv3.src.rpm

CVE-ID: CVE-2020-28241
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: libmaxminddb has a process to overwrite data stored in a buffer located in dynamic memory in a function in the heap in dump_entry_data_list in maxminddb.c.
CVE-STATUS: Fixed
CVE-REV: Run the yum update libmaxminddb command to close it

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchlibmaxminddb< 1.2.0UNKNOWN

Related

nessus 38
ubuntucve 2
osv 12
redhat 26
photon 7
cve 2
almalinux 2
openvas 20
debiancve 2
suse 2
oraclelinux 2
prion 2
cbl_mariner 2
redhatcve 2
veracode 2
gentoo 1
mageia 1
rocky 2
rosalinux 1
fedora 2
debian 1
ubuntu 4
alpinelinux 1
ibm 4
amazon 1
cloudfoundry 1
nessus
nessus
CentOS 8 : libmaxminddb (CESA-2024:0768)
2024-02-12 00:00:00
Oracle Linux 8 : libmaxminddb (ELSA-2024-0768)
2024-02-12 00:00:00
SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2021:1958-1)
2021-06-12 00:00:00
ubuntucve
ubuntucve
CVE-2020-28241
2020-11-06 00:00:00
CVE-2020-17541
2021-06-01 00:00:00
osv
osv
Moderate: libmaxminddb security update
2024-02-12 00:00:00
Moderate: libjpeg-turbo security and bug fix update
2021-11-09 08:56:07
CVE-2020-17541
2021-06-01 15:15:07
redhat
redhat
(RHSA-2024:0751) Moderate: libmaxminddb security update
2024-02-08 17:22:47
(RHSA-2021:4288) Moderate: libjpeg-turbo security and bug fix update
2021-11-09 08:56:07
(RHSA-2024:0750) Moderate: libmaxminddb security update
2024-02-08 17:22:37
photon
photon
Important Photon OS Security Update - PHSA-2021-0048
2021-06-17 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0048
2021-06-17 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0404
2021-06-17 00:00:00
cve
cve
CVE-2020-17541
2021-06-01 15:15:00
CVE-2020-28241
2020-11-06 05:15:00
almalinux
almalinux
Moderate: libjpeg-turbo security and bug fix update
2021-11-09 08:56:07
Moderate: libmaxminddb security update
2024-02-12 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-1075)
2022-02-13 00:00:00
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2021-2470)
2021-09-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1958-1)
2021-06-13 00:00:00
debiancve
debiancve
CVE-2020-17541
2021-06-01 15:15:00
CVE-2020-28241
2020-11-06 05:15:00
suse
suse
Security update for libjpeg-turbo (moderate)
2021-06-16 00:00:00
Security update for libjpeg-turbo (moderate)
2021-07-11 00:00:00
oraclelinux
oraclelinux
libjpeg-turbo security and bug fix update
2021-11-16 00:00:00
libmaxminddb security update
2024-02-12 00:00:00
prion
prion
Stack overflow
2021-06-01 15:15:00
Heap overflow
2020-11-06 05:15:00
cbl_mariner
cbl_mariner
CVE-2020-17541 affecting package libjpeg-turbo 2.0.0-9
2022-04-09 06:51:45
CVE-2020-17541 affecting package libjpeg-turbo 2.0.0-7
2021-07-08 21:56:34
redhatcve
redhatcve
CVE-2020-17541
2021-06-04 18:42:52
CVE-2020-28241
2020-11-06 14:59:19
veracode
veracode
Arbitrary Code Execution
2021-11-13 00:40:54
Denial Of Service (DoS)
2020-12-30 16:52:44
gentoo
gentoo
libmaxminddb: Denial of service
2020-11-14 00:00:00
mageia
mageia
Updated libmaxminddb packages fix security vulnerability
2020-12-28 22:09:43
rocky
rocky
libjpeg-turbo security and bug fix update
2021-11-09 08:56:07
libmaxminddb security update
2024-03-12 15:41:47
rosalinux
rosalinux
Advisory ROSA-SA-2024-2322
2024-01-09 09:59:49
fedora
fedora
[SECURITY] Fedora 33 Update: libmaxminddb-1.4.3-1.fc33
2020-12-26 01:37:30
[SECURITY] Fedora 32 Update: libmaxminddb-1.4.3-1.fc32
2020-12-26 01:19:00
debian
debian
[SECURITY] [DLA 2445-1] libmaxminddb security update
2020-11-10 18:25:00
ubuntu
ubuntu
libmaxminddb vulnerability
2020-11-12 00:00:00
libmaxminddb vulnerability
2022-11-30 00:00:00
libjpeg-turbo vulnerabilities
2022-08-08 00:00:00
alpinelinux
alpinelinux
CVE-2020-28241
2020-11-06 05:15:00
ibm
ibm
Security Bulletin: IBM Security QRadar Event and Flow Exporter App is vulnerable to using components with known vulnerabilities (CVE-2021-31535, CVE-2020-17541)
2022-06-16 18:26:25
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-git , Golang, GnuTLS, Libxml2, protobuf-c, JSON-java, Libmaxminddb, SQLite3 packages and cryptographic algorithms
2024-03-01 05:21:11
Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities
2024-04-24 15:52:28
amazon
amazon
Important: libjpeg-turbo
2023-09-13 23:44:00
cloudfoundry
cloudfoundry
USN-5631-1: libjpeg-turbo vulnerabilities | Cloud Foundry
2022-09-29 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON
Related for ROSA-SA-2024-2323
nessus38ubuntucve2osv12redhat26photon7cve2almalinux2openvas20debiancve2suse2oraclelinux2prion2cbl_mariner2redhatcve2veracode2gentoo1mageia1rocky2rosalinux1fedora2debian1ubuntu4alpinelinux1ibm4amazon1cloudfoundry1