Search for packages
Package details: pkg:deb/debian/lvm2@2.02.39-8
purl pkg:deb/debian/lvm2@2.02.39-8
Next non-vulnerable version 2.03.02-3
Latest non-vulnerable version 2.03.02-3
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-deqa-aj1j-aaah
Aliases:
CVE-2020-8991
** DISPUTED ** vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service through the bug.
2.03.02-3
Affected by 0 other vulnerabilities.
VCID-zzqp-vkt5-aaar
Aliases:
CVE-2010-2526
The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.
2.02.66-5
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T14:32:26.378680+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:54:56.391362+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T00:57:29.858750+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar None 36.1.3
2025-06-20T20:18:06.294586+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah None 36.1.3
2025-06-08T07:25:30.430684+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:49:13.129185+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:19:51.631935+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar None 36.1.0
2025-06-07T13:56:46.451949+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah None 36.1.0
2025-04-12T22:24:49.623658+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:32:18.840673+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T05:58:07.904417+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:21:37.762856+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T16:57:27.683500+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar None 36.0.0
2025-04-07T12:31:26.565161+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah None 36.0.0
2024-11-27T18:46:23.095452+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-13T11:31:57.333912+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-09-20T22:57:02.282829+00:00 Debian Oval Importer Affected by VCID-zzqp-vkt5-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1