Red Hat Security Advisory

RHSA-2024:0750

libmaxminddb security update

Released 2024-02-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.8) libmaxminddb-1.2.0-10.el8_8.1, libmaxminddb-devel-1.2.0-10.el8_8.1

TI-2020-17152 CVE-2020-28241 · GHSA-8h2q-prr9-7wh9

LOW 33

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02159 Published 2020-11-06 Partial fix CWE-125