A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsolv-debuginfoUpgrade libsolvUpgrade libsolv-develUpgrade python2-solvUpgrade libsolv-demoUpgrade libsolv-tools | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-develUpgrade ruby-solvUpgrade python3-solvUpgrade ruby-solv-debuginfoUpgrade libsolvUpgrade libsolv-toolsUpgrade python3-solv-debuginfoUpgrade libsolv-demoUpgrade libsolv-debuginfoUpgrade libsolv-debugsourceUpgrade perl-solvUpgrade libsolv-tools-debuginfo | Jun 9, 2026 | May 20, 2026 |
| Redhat_linux | — | Upgrade python3-solv-debuginfoUpgrade libsolv-tools-baseUpgrade libsolv-debugsourceUpgrade libsolv-tools-base-debuginfoUpgrade python3-solvUpgrade libsolvUpgrade libsolv-debuginfoNo solution existsUpgrade perl-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolv-demo-debuginfoUpgrade ruby-solv-debuginfo | Jun 25, 2026 | May 20, 2026 |
| Rocky_linux | — | Upgrade libsolv-debugsourceUpgrade libsolv-debuginfoUpgrade libsolv-tools-baseUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolvUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade python3-solvUpgrade libsolv-tools-base-debuginfo | Jun 29, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 22, 2026 | May 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub