Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade rubygem-localeUpgrade libsolv-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-http-cookieUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-highlineUpgrade python3-solvUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade perl-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade rubygem-fast_gettextUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade tfm-rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-powerbarUpgrade rubygem-netrcUpgrade rubygem-clampUpgrade ruby-solv-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-unicodeUpgrade satellite-cloneUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-runtimeUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-clampUpgrade rubygem-domain_nameUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade libsolv-debugsourceUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade rubygem-jwtUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-netrcUpgrade rubygem-unfUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-oauthUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_remote_execution | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-develUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade perl-solv-debuginfoUpgrade python3-solvNo solution existsUpgrade ruby-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libsolv | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-tools-debuginfoUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolvUpgrade libsolv-debuginfoUpgrade libsolv-develUpgrade libsolv-tools | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub