Search for packages
Package details: pkg:deb/debian/lvm2@2.02.95-8
purl pkg:deb/debian/lvm2@2.02.95-8
Next non-vulnerable version 2.03.02-3
Latest non-vulnerable version 2.03.02-3
Risk 1.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-deqa-aj1j-aaah
Aliases:
CVE-2020-8991
** DISPUTED ** vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service through the bug.
2.03.02-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T13:54:56.395583+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-20T20:18:06.298268+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah None 36.1.3
2025-06-08T06:49:13.132755+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T13:56:46.455563+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah None 36.1.0
2025-04-12T19:32:18.850661+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T05:21:37.772863+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T12:31:26.577241+00:00 Debian Oval Importer Affected by VCID-deqa-aj1j-aaah None 36.0.0