There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librhsm | May 4, 2022 | Dec 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python2-solvUpgrade libsolvUpgrade libsolv-demoUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv-debuginfo | Apr 27, 2020 | Dec 28, 2018 |
| Centos_linux | — | Upgrade libdnfUpgrade libcompsUpgrade python3-libcompsUpgrade python3-libdnfUpgrade python3-dnf-plugin-versionlockUpgrade librhsm-debugsourceUpgrade perl-solv-debuginfoUpgrade python3-hawkeyUpgrade python3-libcomps-debuginfoUpgrade librhsm-debuginfoUpgrade ruby-solv-debuginfoUpgrade librhsmUpgrade python3-librepoUpgrade python3-solv-debuginfoUpgrade python3-createrepo_c-debuginfoUpgrade dnf-plugins-coreUpgrade createrepo_cUpgrade python2-solvUpgrade libdnf-debuginfoUpgrade librepo-debugsourceUpgrade createrepo_c-develUpgrade python3-createrepo_cUpgrade librepo-debuginfoUpgrade libsolv-demoUpgrade python3-libdnf-debuginfoUpgrade libcomps-debugsourceUpgrade librepoUpgrade microdnf-debugsourceUpgrade yumUpgrade libsolvUpgrade microdnfUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade createrepo_c-libs-debuginfoUpgrade python3-dnf-plugins-coreUpgrade python3-librepo-debuginfoUpgrade libcomps-develUpgrade libcomps-debuginfoUpgrade libsolv-develUpgrade dnf-dataUpgrade dnf-automaticUpgrade libdnf-debugsourceUpgrade python3-hawkey-debuginfoUpgrade libsolv-debugsourceUpgrade createrepo_c-libsUpgrade createrepo_c-debugsourceUpgrade python3-dnfUpgrade libsolv-demo-debuginfoUpgrade libsolv-debuginfoUpgrade microdnf-debuginfoUpgrade dnfUpgrade createrepo_c-debuginfoUpgrade yum-utils | Aug 28, 2019 | Dec 28, 2018 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Nov 19, 2019 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Nov 2, 2020 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Jun 27, 2019 | Dec 28, 2018 |
| Oracle_linux | — | Upgrade python3-librepoUpgrade librepoUpgrade dnfUpgrade python3-dnf-plugins-coreUpgrade libsolvUpgrade python2-solvUpgrade python3-dnfUpgrade dnf-dataUpgrade python3-createrepo_cUpgrade libsolv-develUpgrade libsolv-demoUpgrade yum-utilsUpgrade libsolv-toolsUpgrade python3-dnf-plugin-versionlockUpgrade libdnfUpgrade createrepo_c-develUpgrade createrepo_cUpgrade python3-hawkeyUpgrade dnf-automaticUpgrade python3-libcompsUpgrade microdnfUpgrade librhsmUpgrade libcompsUpgrade libcomps-develUpgrade dnf-plugins-coreUpgrade python3-libdnfUpgrade createrepo_c-libsUpgrade yum | Jul 21, 2020 | Nov 22, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade librhsmUpgrade python3-dnf-plugin-versionlockUpgrade dnf-plugins-coreUpgrade librepoUpgrade python3-librepoUpgrade python3-libdnf-debuginfoUpgrade python3-hawkeyUpgrade python3-libdnfUpgrade librepo-debuginfoUpgrade libsolv-demoUpgrade libdnf-debuginfoUpgrade python2-solvUpgrade python3-solv-debuginfoUpgrade librhsm-debugsourceUpgrade librhsm-debuginfoUpgrade libdnfUpgrade python3-libcomps-debuginfoUpgrade microdnf-debugsourceUpgrade libsolvUpgrade python3-createrepo_cUpgrade python3-createrepo_c-debuginfoUpgrade createrepo_c-develUpgrade librepo-debugsourceUpgrade python3-libcompsUpgrade perl-solv-debuginfoUpgrade libcomps-debugsourceUpgrade libcompsUpgrade createrepo_cUpgrade ruby-solv-debuginfoUpgrade dnf-dataUpgrade microdnf-debuginfoUpgrade createrepo_c-libs-debuginfoUpgrade yum-utilsUpgrade createrepo_c-libsUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfoUpgrade dnf-automaticUpgrade libcomps-debuginfoUpgrade libdnf-debugsourceUpgrade python3-dnf-plugins-coreUpgrade libsolv-develUpgrade microdnfUpgrade libsolv-debuginfoUpgrade python3-dnfUpgrade libcomps-develUpgrade dnfUpgrade python3-librepo-debuginfoUpgrade yumUpgrade createrepo_c-debugsourceUpgrade createrepo_c-debuginfoUpgrade python3-hawkey-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsource | Aug 7, 2019 | Dec 28, 2018 |
| Suse | — | Upgrade PackageKit-backend-zyppUpgrade PackageKit-develUpgrade libzyppUpgrade PackageKitUpgrade python3-solvUpgrade typelib-1_0-PackageKitGlib-1_0Upgrade yast2-pkg-bindings-devel-docUpgrade libyui-ncurses-pkg-docUpgrade libyui-ncurses-pkg-develUpgrade libpackagekit-glib2-devel-32bitUpgrade libyui-qt-pkg-develUpgrade libyui-qt-pkg-docUpgrade zypper-logUpgrade ruby-solvUpgrade PackageKit-branding-upstreamUpgrade libsolv-demoUpgrade libyui-qt-pkg9Upgrade libyui-ncurses-pkg9Upgrade zypper-aptitudeUpgrade libsolv-develUpgrade PackageKit-gstreamer-pluginUpgrade PackageKit-langUpgrade libyui-ncurses-pkg8Upgrade zypperUpgrade libyui-qt-pkg8Upgrade libzypp-devel-docUpgrade libzypp-develUpgrade perl-solvUpgrade libpackagekit-glib2-develUpgrade libsolv-toolsUpgrade python-solvUpgrade zypper-needs-restartingUpgrade PackageKit-gtk3-moduleUpgrade libpackagekit-glib2-18Upgrade libpackagekit-glib2-18-32bitUpgrade yast2-pkg-bindings | Jul 26, 2019 | Dec 28, 2018 |
| Ubuntu | — | Upgrade libsolv0 (Ubuntu Pro)Upgrade libsolvext0 (Ubuntu Pro)Upgrade libsolv0Upgrade libsolvext0Upgrade libsolv-tools | Apr 1, 2019 | Dec 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub