CVE-2021-20204

A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on input/skills of attacker.

Date published : 2021-05-06

https://bugzilla.redhat.com/show_bug.cgi?id=1956348

https://lists.debian.org/debian-lts-announce/2021/05/msg00015.html