Lucene search
K

96 matches found

OSV
OSV
added 2020/11/12 1:31 p.m.2 views

USN-4631-1 libmaxminddb vulnerability

It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using libmaxminddb to crash, resulting in a denial of service...

6.5CVSS6.6AI score0.02133EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:0 a.m.27 views

Debian DLA-2445-1 : libmaxminddb security update

A heap-based buffer over-read has been found in libmaxminddb, an IP geolocation database library. This could be exploited when the mmdblookup tool is used to open a specially crafted database file. For Debian 9 stretch, this problem has been fixed in version 1.2.0-1+deb9u1. We recommend that you...

6.5CVSS6.5AI score0.02133EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:0 a.m.25 views

Ubuntu 20.04 LTS : libmaxminddb vulnerability (USN-4631-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4631-1 advisory. It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using...

6.5CVSS6.5AI score0.02133EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/11/11 12:0 a.m.12 views

Debian: Security Advisory (DLA-2445-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.6AI score0.02133EPSS
Exploits1References4
Debian
Debian
added 2020/11/10 6:25 p.m.85 views

[SECURITY] [DLA 2445-1] libmaxminddb security update

Debian LTS Advisory DLA-2445-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 10, 2020 https://wiki.debian.org/LTS Package : libmaxminddb Version : 1.2.0-1+deb9u1 CVE ID : CVE-2020-28241 Debian Bug : 973878 A heap-based buffer over-read has been found in...

6.5CVSS6.7AI score0.02133EPSS
Exploits1
Oracle linux
Oracle linux
added 2020/11/10 12:0 a.m.67 views

bind security, bug fix, and enhancement update

32:9.11.20-5 - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match documentation CVE-2020-8624 - Include available test 32:9.11.20-4 - Prevent crash on dstlib initialization failure 1859454 32:9.11.20-...

8.6CVSS1.5AI score0.93422EPSS
Exploits6
CNVD
CNVD
added 2020/11/10 12:0 a.m.3 views

Maxmind Libmaxminddb Buffer Overflow Vulnerability

Maxmind Libmaxminddb is the U.S. Maxmind company a C code library for processing Maxmind type files. The code library for processing Maxmind DB files, including the format of the geo-ip data, geo-ip can be used to retrieve the target IP information. A security vulnerability exists in libmaxminddb...

6.5CVSS7.9AI score0.02133EPSS
Exploits1References1
OSV
OSV
added 2020/11/10 12:0 a.m.25 views

DLA-2445-1 libmaxminddb - security update

Bulletin has no description...

6.5CVSS6.7AI score0.02133EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2020/11/06 2:59 p.m.37 views

CVE-2020-28241

An improper initialization issue was found in libmaxminddb. A remote user could exploit this flaw by sending a specially crafted MaxMind DB file that, when parsed by an application linked to libmaxminddb, would possibly crash the application, resulting in a denial of service condition...

4.3CVSS4.1AI score0.02133EPSS
Exploits1References3
OSV
OSV
added 2020/11/06 5:15 a.m.23 views

CVE-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

6.5CVSS6.8AI score
Exploits0References7
OSV
OSV
added 2020/11/06 5:15 a.m.2 views

ALPINE-CVE-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

6.5CVSS7.2AI score0.02133EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2020/11/06 5:15 a.m.27 views

CVE-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

6.5CVSS6.8AI score0.02133EPSS
Exploits1References4
Prion
Prion
added 2020/11/06 5:15 a.m.18 views

Heap overflow

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

4.3CVSS6.3AI score0.02133EPSS
Exploits1References7Affected Software3
OSV
OSV
added 2020/11/06 5:15 a.m.0 views

UBUNTU-CVE-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

6.5CVSS6.8AI score0.02133EPSS
Exploits1References5
CVE
CVE
added 2020/11/06 4:43 a.m.193 views

CVE-2020-28241

CVE-2020-28241 affects libmaxminddb prior to 1.4.3. A heap-based buffer over-read in dump_entry_data_list (maxminddb.c) is the root cause. Public advisories confirm the library as the vulnerable component; multiple sources (ALMA, Fedora, Debian) indicate fixes in libmaxminddb 1.4.3 and related se...

6.5CVSS6.5AI score0.02133EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2020/11/06 4:43 a.m.17 views

CVE-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

6.7AI score0.02133EPSS
Exploits1References7
AlpineLinux
AlpineLinux
added 2020/11/06 4:43 a.m.36 views

CVE-2020-28241

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...

6.5CVSS6.9AI score0.02133EPSS
Exploits1
AlmaLinux
AlmaLinux
added 2020/11/03 12:31 p.m.14 views

libmaxminddb bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.5AI score
Exploits0References1
Rockylinux
Rockylinux
added 2020/11/03 12:31 p.m.15 views

libmaxminddb bug fix and enhancement update

An update is available for libmaxminddb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2AI score
Exploits0
OSV
OSV
added 2020/11/03 12:31 p.m.11 views

ALBA-2020:4726 libmaxminddb bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
Exploits0References1
Rows per page
Query Builder