SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)

ID: oval:org.secpod.oval:def:1801816	Date: (C)2021-01-27 (M)2024-02-26
Class: PATCH	Family: unix

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

Platform:

Alpine Linux 3.10

Alpine Linux 3.11

Alpine Linux 3.13

Product:

libmaxminddb

Reference:

12251