Summary
[1.2.0-10.1]
- Resolves: RHEL-20594 - improper initialization in dump_entry_data_list() in maxminddb.c
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libmaxminddb | 0:1.2.0-10.el8_9.1 |
| Oracle Linux · 8 | libmaxminddb-devel | 0:1.2.0-10.el8_9.1 |
Vulnerabilities 1
-
Unscored —
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.