97 matches found
USN-4631-1: libmaxminddb vulnerability
It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using libmaxminddb to crash, resulting in a denial of service...
USN-4631-1 libmaxminddb vulnerability
It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using libmaxminddb to crash, resulting in a denial of service...
Ubuntu 20.04 LTS : libmaxminddb vulnerability (USN-4631-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4631-1 advisory. It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using...
Debian DLA-2445-1 : libmaxminddb security update
A heap-based buffer over-read has been found in libmaxminddb, an IP geolocation database library. This could be exploited when the mmdblookup tool is used to open a specially crafted database file. For Debian 9 stretch, this problem has been fixed in version 1.2.0-1+deb9u1. We recommend that you...
Debian: Security Advisory (DLA-2445-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2445-1] libmaxminddb security update
Debian LTS Advisory DLA-2445-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 10, 2020 https://wiki.debian.org/LTS Package : libmaxminddb Version : 1.2.0-1+deb9u1 CVE ID : CVE-2020-28241 Debian Bug : 973878 A heap-based buffer over-read has been found in...
Maxmind Libmaxminddb Buffer Overflow Vulnerability
Maxmind Libmaxminddb is the U.S. Maxmind company a C code library for processing Maxmind type files. The code library for processing Maxmind DB files, including the format of the geo-ip data, geo-ip can be used to retrieve the target IP information. A security vulnerability exists in libmaxminddb...
bind security, bug fix, and enhancement update
32:9.11.20-5 - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match documentation CVE-2020-8624 - Include available test 32:9.11.20-4 - Prevent crash on dstlib initialization failure 1859454 32:9.11.20-...
DLA-2445-1 libmaxminddb - security update
Bulletin has no description...
CVE-2020-28241
An improper initialization issue was found in libmaxminddb. A remote user could exploit this flaw by sending a specially crafted MaxMind DB file that, when parsed by an application linked to libmaxminddb, would possibly crash the application, resulting in a denial of service condition...
ALPINE-CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
Heap overflow
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
UBUNTU-CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
CVE-2020-28241
CVE-2020-28241 affects libmaxminddb prior to 1.4.3. A heap-based buffer over-read in dump_entry_data_list (maxminddb.c) is the root cause. Public advisories confirm the library as the vulnerable component; multiple sources (ALMA, Fedora, Debian) indicate fixes in libmaxminddb 1.4.3 and related se...
CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...