Summary
It was discovered that libmaxminddb incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause
applications using libmaxminddb to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libmaxminddb | 1.0.4-2.1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
References
-
report
https://ubuntu.com/security/CVE-2020-28241