Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade ruby-solv-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade tfm-rubygem-unicode-debuginfoUpgrade python3-solvUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicode-display_widthUpgrade python3-solv-debuginfoUpgrade rubygem-rest-clientUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-runtimeUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-mime-typesUpgrade satellite-cloneUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-loggingUpgrade libsolv-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-domain_nameUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-jwtUpgrade foreman-cliUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_extUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unf_extUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade libsolv-tools-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-domain_nameUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade rubygem-unfUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-clampUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade tfm-rubygem-netrcUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-foreman_maintainUpgrade libsolv-debugsourceUpgrade rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_templates | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolvUpgrade libsolv-tools | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade perl-solv-debuginfoUpgrade libsolvUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-debuginfoNo solution existsUpgrade python3-solvUpgrade ruby-solv-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-demo-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libsolv-debugsourceUpgrade libsolvUpgrade libsolv-toolsUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libsolv-develUpgrade libsolv-debuginfoUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub