Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicode-debuginfoUpgrade foreman-cliUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-little-pluggerUpgrade satellite-maintainUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-localeUpgrade libsolv-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-jwtUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade libsolv-debugsourceUpgrade libsolvUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-cloneUpgrade rubygem-oauthUpgrade rubygem-mime-typesUpgrade rubygem-localeUpgrade rubygem-unfUpgrade python3-solvUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade tfm-runtimeUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cliUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-amazing_printUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-clamp | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfoUpgrade perl-solv-debuginfoUpgrade libsolv-toolsUpgrade ruby-solv-debuginfoUpgrade libsolv-develUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libsolvUpgrade libsolv-debuginfoNo solution existsUpgrade libsolv-tools-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade python3-solv-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolvUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libsolv-debugsource | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub