There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librhsm | May 4, 2022 | Dec 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libsolv-demoUpgrade python2-solvUpgrade libsolvUpgrade libsolv-devel | Apr 27, 2020 | Dec 28, 2018 |
| Centos_linux | — | Upgrade libcomps-debuginfoUpgrade python3-hawkey-debuginfoUpgrade libsolv-develUpgrade dnfUpgrade libsolv-debuginfoUpgrade dnf-automaticUpgrade microdnf-debuginfoUpgrade libsolvUpgrade createrepo_c-debugsourceUpgrade libsolv-tools-debuginfoUpgrade createrepo_c-libsUpgrade yumUpgrade microdnfUpgrade python3-dnf-plugins-coreUpgrade createrepo_c-libs-debuginfoUpgrade python3-librepo-debuginfoUpgrade libdnf-debugsourceUpgrade libsolv-toolsUpgrade createrepo_c-debuginfoUpgrade libcomps-develUpgrade yum-utilsUpgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfoUpgrade dnf-dataUpgrade python3-dnfUpgrade librhsm-debuginfoUpgrade python3-libcompsUpgrade createrepo_c-develUpgrade python3-createrepo_c-debuginfoUpgrade python3-libcomps-debuginfoUpgrade libsolv-demoUpgrade python3-librepoUpgrade libdnf-debuginfoUpgrade python3-solv-debuginfoUpgrade createrepo_cUpgrade librepo-debuginfoUpgrade libdnfUpgrade libcomps-debugsourceUpgrade perl-solv-debuginfoUpgrade python3-libdnfUpgrade python3-hawkeyUpgrade librepoUpgrade python3-createrepo_cUpgrade librepo-debugsourceUpgrade python3-dnf-plugin-versionlockUpgrade librhsm-debugsourceUpgrade dnf-plugins-coreUpgrade ruby-solv-debuginfoUpgrade python2-solvUpgrade librhsmUpgrade microdnf-debugsourceUpgrade libcompsUpgrade python3-libdnf-debuginfo | Aug 28, 2019 | Dec 28, 2018 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Nov 19, 2019 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Nov 2, 2020 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Jun 27, 2019 | Dec 28, 2018 |
| Oracle_linux | — | Upgrade createrepo_c-libsUpgrade libcomps-develUpgrade python3-libcompsUpgrade python3-libdnfUpgrade microdnfUpgrade dnf-automaticUpgrade yumUpgrade libcompsUpgrade dnf-plugins-coreUpgrade librhsmUpgrade librepoUpgrade python3-librepoUpgrade libsolv-toolsUpgrade libsolvUpgrade python3-dnf-plugins-coreUpgrade python3-dnfUpgrade libsolv-develUpgrade python3-createrepo_cUpgrade yum-utilsUpgrade python3-hawkeyUpgrade libdnfUpgrade dnfUpgrade libsolv-demoUpgrade python2-solvUpgrade dnf-dataUpgrade createrepo_cUpgrade createrepo_c-develUpgrade python3-dnf-plugin-versionlock | Jul 21, 2020 | Nov 22, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade createrepo_c-libs-debuginfoUpgrade libcomps-develUpgrade microdnfUpgrade libsolv-demo-debuginfoUpgrade createrepo_c-libsUpgrade libcomps-debuginfoUpgrade createrepo_c-debuginfoUpgrade yum-utilsUpgrade libsolv-toolsUpgrade python3-dnf-plugins-coreUpgrade libsolv-debuginfoUpgrade createrepo_c-debugsourceUpgrade libsolv-develUpgrade python3-hawkey-debuginfoUpgrade python3-dnfUpgrade libsolv-debugsourceUpgrade yumUpgrade dnf-dataUpgrade microdnf-debuginfoUpgrade dnfUpgrade libsolv-tools-debuginfoUpgrade dnf-automaticUpgrade libdnf-debugsourceUpgrade python3-librepo-debuginfoUpgrade librepoUpgrade python3-librepoUpgrade python3-libcompsUpgrade perl-solv-debuginfoUpgrade libsolvUpgrade python3-createrepo_cUpgrade microdnf-debugsourceUpgrade libdnf-debuginfoUpgrade python3-dnf-plugin-versionlockUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-libdnf-debuginfoUpgrade libcomps-debugsourceUpgrade python2-solvUpgrade python3-hawkeyUpgrade libcompsUpgrade libdnfUpgrade createrepo_cUpgrade dnf-plugins-coreUpgrade python3-libcomps-debuginfoUpgrade librhsm-debugsourceUpgrade librhsm-debuginfoUpgrade createrepo_c-develUpgrade librepo-debugsourceUpgrade python3-libdnfUpgrade python3-createrepo_c-debuginfoUpgrade libsolv-demoUpgrade librepo-debuginfoUpgrade librhsm | Aug 7, 2019 | Dec 28, 2018 |
| Suse | — | Upgrade PackageKit-gstreamer-pluginUpgrade zypperUpgrade libpackagekit-glib2-18Upgrade libyui-ncurses-pkg8Upgrade libzypp-devel-docUpgrade zypper-needs-restartingUpgrade perl-solvUpgrade python-solvUpgrade libyui-qt-pkg8Upgrade libsolv-develUpgrade yast2-pkg-bindingsUpgrade libsolv-toolsUpgrade libpackagekit-glib2-develUpgrade PackageKit-gtk3-moduleUpgrade libzypp-develUpgrade PackageKit-langUpgrade zypper-aptitudeUpgrade libpackagekit-glib2-18-32bitUpgrade typelib-1_0-PackageKitGlib-1_0Upgrade python3-solvUpgrade yast2-pkg-bindings-devel-docUpgrade libpackagekit-glib2-devel-32bitUpgrade PackageKit-branding-upstreamUpgrade libyui-qt-pkg-docUpgrade PackageKit-backend-zyppUpgrade libyui-ncurses-pkg-docUpgrade libyui-qt-pkg-develUpgrade libyui-qt-pkg9Upgrade PackageKit-develUpgrade libsolv-demoUpgrade libzyppUpgrade PackageKitUpgrade libyui-ncurses-pkg-develUpgrade libyui-ncurses-pkg9Upgrade zypper-logUpgrade ruby-solv | Jul 26, 2019 | Dec 28, 2018 |
| Ubuntu | — | Upgrade libsolv-toolsUpgrade libsolvext0Upgrade libsolvext0 (Ubuntu Pro)Upgrade libsolv0Upgrade libsolv0 (Ubuntu Pro) | Apr 1, 2019 | Dec 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub