Skip to main content

Libmaxminddb

1 CVEs product

Monthly

CVE-2020-28241 Nov 06, 05:15 MEDIUM POC PATCH This Month

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Debian Debian Linux Fedora +2
NVD GitHub
CVSS 3.1
6.5
EPSS
2.1%
EPSS 2% CVSS 6.5
MEDIUM POC PATCH This Month

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Debian +4
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy