libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libmaxminddb-develUpgrade libmaxminddb | Feb 13, 2024 | Nov 6, 2020 |
| Alpine Linux | — | Upgrade libmaxminddb | Jan 5, 2021 | Nov 6, 2020 |
| Debian | — | Upgrade libmaxminddb | Nov 12, 2020 | Nov 6, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/libmaxminddb. | Nov 16, 2020 | Nov 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libmaxminddb | Feb 2, 2021 | Nov 6, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade libmaxminddb-develUpgrade libmaxminddb | Feb 12, 2024 | Aug 4, 2020 |
| Redhat_linux | — | Upgrade libmaxminddb-debugsourceUpgrade libmaxminddbUpgrade libmaxminddb-develUpgrade libmaxminddb-debuginfoNo solution exists | Feb 12, 2024 | Nov 6, 2020 |
| Rocky_linux | — | Upgrade libmaxminddb-debugsourceUpgrade libmaxminddb-debuginfoUpgrade libmaxminddbUpgrade libmaxminddb-devel | Mar 13, 2024 | Nov 6, 2020 |
| Ubuntu | — | Upgrade libmaxminddb0 (Ubuntu Pro)Upgrade libmaxminddb0 | Mar 22, 2023 | Nov 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub