Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | May 18, 2021 |
| Amazon_linux_2023 | — | Upgrade libsolv-debugsourceUpgrade perl-solvUpgrade libsolv-toolsUpgrade libsolv-demo-debuginfoUpgrade libsolv-develUpgrade ruby-solv-debuginfoUpgrade ruby-solvUpgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-demoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolvUpgrade perl-solv-debuginfo | Feb 17, 2025 | Dec 13, 2020 |
| Centos_linux | — | Upgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-domain_nameUpgrade libsolv-debugsourceUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-hashieUpgrade rubygem-unicode-debuginfoUpgrade rubygem-jwtUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade rubygem-unfUpgrade tfm-rubygem-loggingUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-little-pluggerUpgrade python3-solvUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-rest-clientUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-localeUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-amazing_printUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-fast_gettextUpgrade perl-solv-debuginfoUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade satellite-cloneUpgrade libsolvUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_openscapUpgrade libsolv-debuginfoUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-http-cookieUpgrade satellite-maintainUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-netrcUpgrade tfm-runtimeUpgrade ruby-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-localeUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade rubygem-powerbarUpgrade rubygem-clampUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-jwt | Nov 10, 2021 | May 18, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Sep 24, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv | Nov 17, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-debugsourceUpgrade python3-solvUpgrade libsolvNo solution existsUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfo | Nov 10, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade python3-solvUpgrade libsolv-develUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libsolv-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-toolsUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv | Mar 12, 2024 | May 18, 2021 |
| Suse | — | Upgrade libzypp-develUpgrade libzypp-devel-docUpgrade libzyppUpgrade perl-solvUpgrade libsolv-toolsUpgrade python-solvUpgrade libsolv-devel | Jun 24, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub