libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libmaxminddb-develUpgrade libmaxminddb | Feb 13, 2024 | Nov 6, 2020 |
| Alpine Linux | — | Upgrade libmaxminddb | Jan 5, 2021 | Nov 6, 2020 |
| Debian | — | Upgrade libmaxminddb | Nov 12, 2020 | Nov 6, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/libmaxminddb. | Nov 16, 2020 | Nov 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libmaxminddb | Feb 2, 2021 | Nov 6, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade libmaxminddbUpgrade libmaxminddb-devel | Feb 12, 2024 | Aug 4, 2020 |
| Redhat_linux | — | Upgrade libmaxminddbUpgrade libmaxminddb-debugsourceUpgrade libmaxminddb-debuginfoNo solution existsUpgrade libmaxminddb-devel | Feb 12, 2024 | Nov 6, 2020 |
| Rocky_linux | — | Upgrade libmaxminddbUpgrade libmaxminddb-debuginfoUpgrade libmaxminddb-develUpgrade libmaxminddb-debugsource | Mar 13, 2024 | Nov 6, 2020 |
| Ubuntu | — | Upgrade libmaxminddb0 (Ubuntu Pro)Upgrade libmaxminddb0 | Mar 22, 2023 | Nov 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub