Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade perl-solv-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-maintainUpgrade rubygem-unf_extUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hashieUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade ruby-solv-debuginfoUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-localeUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-clampUpgrade python3-solvUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade foreman-cliUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_adminUpgrade libsolvUpgrade rubygem-highlineUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-fast_gettextUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-types-dataUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-localeUpgrade rubygem-domain_nameUpgrade tfm-rubygem-multi_jsonUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-apipie-bindingsUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-loggingUpgrade satellite-cliUpgrade tfm-runtimeUpgrade libsolv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-powerbarUpgrade rubygem-amazing_printUpgrade tfm-rubygem-oauthUpgrade rubygem-unfUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debuginfoUpgrade rubygem-multi_jsonUpgrade libsolv-debugsourceUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debugsource | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolv-demo-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolvNo solution existsUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade libsolv-devel | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub