Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-debugsourceUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-localeUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-loggingUpgrade rubygem-http-cookieUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-http-cookieUpgrade rubygem-mime-typesUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-little-pluggerUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade tfm-rubygem-jwtUpgrade rubygem-oauthUpgrade rubygem-jwtUpgrade rubygem-domain_nameUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade tfm-rubygem-clampUpgrade satellite-cliUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-runtimeUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cloneUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_azure_rm | Jul 14, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Jun 9, 2023 | Feb 21, 2022 |
| Redhat_linux | — | Upgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-rest-clientUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unfUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-highlineUpgrade rubygem-http-cookieUpgrade rubygem-unicode-display_widthUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_ansibleNo solution existsUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-netrcUpgrade rubygem-localeUpgrade satellite-cliUpgrade tfm-rubygem-unicodeUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hashieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade tfm-rubygem-unf_extUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-fast_gettextUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-clampUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-debuginfoUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-multi_jsonUpgrade rubygem-jwtUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cliUpgrade rubygem-mime-typesUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-debugsource | Jul 14, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | Feb 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub