There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librhsm | May 4, 2022 | Dec 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsolv-demoUpgrade python2-solvUpgrade libsolvUpgrade libsolv-develUpgrade libsolv-debuginfoUpgrade libsolv-tools | Apr 27, 2020 | Dec 28, 2018 |
| Centos_linux | — | Upgrade dnf-automaticUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade python3-dnf-plugins-coreUpgrade microdnfUpgrade createrepo_c-debugsourceUpgrade python3-dnfUpgrade libsolv-demo-debuginfoUpgrade libcomps-develUpgrade libsolv-develUpgrade python3-librepo-debuginfoUpgrade libcomps-debuginfoUpgrade libdnf-debugsourceUpgrade libsolvUpgrade createrepo_c-libs-debuginfoUpgrade microdnf-debuginfoUpgrade createrepo_c-debuginfoUpgrade python3-hawkey-debuginfoUpgrade dnf-dataUpgrade libsolv-debugsourceUpgrade yumUpgrade dnfUpgrade libsolv-debuginfoUpgrade yum-utilsUpgrade createrepo_c-libsUpgrade librhsmUpgrade python3-libdnf-debuginfoUpgrade microdnf-debugsourceUpgrade python3-librepoUpgrade python2-solvUpgrade libdnf-debuginfoUpgrade libsolv-demoUpgrade python3-createrepo_c-debuginfoUpgrade librhsm-debuginfoUpgrade librepo-debuginfoUpgrade createrepo_c-develUpgrade perl-solv-debuginfoUpgrade python3-libcompsUpgrade python3-libdnfUpgrade librhsm-debugsourceUpgrade createrepo_cUpgrade libcompsUpgrade python3-hawkeyUpgrade python3-dnf-plugin-versionlockUpgrade dnf-plugins-coreUpgrade ruby-solv-debuginfoUpgrade python3-libcomps-debuginfoUpgrade libcomps-debugsourceUpgrade python3-solv-debuginfoUpgrade libdnfUpgrade librepo-debugsourceUpgrade librepoUpgrade python3-createrepo_c | Aug 28, 2019 | Dec 28, 2018 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Nov 19, 2019 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Nov 2, 2020 | Dec 28, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Jun 27, 2019 | Dec 28, 2018 |
| Oracle_linux | — | Upgrade libcompsUpgrade python3-libcompsUpgrade createrepo_c-libsUpgrade dnf-automaticUpgrade python3-libdnfUpgrade yumUpgrade microdnfUpgrade librhsmUpgrade libcomps-develUpgrade dnf-plugins-coreUpgrade python3-dnf-plugin-versionlockUpgrade python3-dnfUpgrade libdnfUpgrade createrepo_c-develUpgrade libsolv-demoUpgrade python2-solvUpgrade python3-hawkeyUpgrade dnfUpgrade createrepo_cUpgrade librepoUpgrade python3-createrepo_cUpgrade libsolvUpgrade libsolv-toolsUpgrade yum-utilsUpgrade libsolv-develUpgrade dnf-dataUpgrade python3-librepoUpgrade python3-dnf-plugins-core | Jul 21, 2020 | Nov 22, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade librepo-debugsourceUpgrade libsolv-demoUpgrade libcomps-debugsourceUpgrade microdnf-debugsourceUpgrade python2-solvUpgrade createrepo_cUpgrade libdnfUpgrade libcompsUpgrade python3-libdnf-debuginfoUpgrade librhsm-debugsourceUpgrade libsolvUpgrade librhsm-debuginfoUpgrade createrepo_c-develUpgrade python3-libcomps-debuginfoUpgrade python3-dnf-plugin-versionlockUpgrade python3-solv-debuginfoUpgrade librhsmUpgrade dnf-plugins-coreUpgrade perl-solv-debuginfoUpgrade librepoUpgrade ruby-solv-debuginfoUpgrade python3-createrepo_cUpgrade libdnf-debuginfoUpgrade python3-libdnfUpgrade python3-createrepo_c-debuginfoUpgrade python3-libcompsUpgrade python3-librepoUpgrade librepo-debuginfoUpgrade python3-hawkeyUpgrade libsolv-tools-debuginfoUpgrade dnf-dataUpgrade dnfUpgrade python3-dnf-plugins-coreUpgrade microdnfUpgrade libdnf-debugsourceUpgrade python3-hawkey-debuginfoUpgrade microdnf-debuginfoUpgrade createrepo_c-debuginfoUpgrade libsolv-toolsUpgrade createrepo_c-debugsourceUpgrade libsolv-debugsourceUpgrade python3-librepo-debuginfoUpgrade yumUpgrade dnf-automaticUpgrade libsolv-debuginfoUpgrade libcomps-develUpgrade libsolv-develUpgrade libsolv-demo-debuginfoUpgrade createrepo_c-libsUpgrade python3-dnfUpgrade yum-utilsUpgrade createrepo_c-libs-debuginfoUpgrade libcomps-debuginfo | Aug 7, 2019 | Dec 28, 2018 |
| Suse | — | Upgrade python-solvUpgrade libyui-ncurses-pkg8Upgrade zypper-needs-restartingUpgrade libpackagekit-glib2-18Upgrade PackageKit-gstreamer-pluginUpgrade libsolv-develUpgrade yast2-pkg-bindingsUpgrade perl-solvUpgrade libzypp-devel-docUpgrade libyui-qt-pkg8Upgrade zypperUpgrade libsolv-toolsUpgrade PackageKit-gtk3-moduleUpgrade libpackagekit-glib2-develUpgrade zypper-aptitudeUpgrade PackageKit-langUpgrade libpackagekit-glib2-18-32bitUpgrade libzypp-develUpgrade libyui-qt-pkg-develUpgrade python3-solvUpgrade PackageKit-backend-zyppUpgrade ruby-solvUpgrade libyui-qt-pkg-docUpgrade libyui-ncurses-pkg9Upgrade PackageKit-branding-upstreamUpgrade libzyppUpgrade libyui-qt-pkg9Upgrade PackageKit-develUpgrade libyui-ncurses-pkg-docUpgrade typelib-1_0-PackageKitGlib-1_0Upgrade libyui-ncurses-pkg-develUpgrade libsolv-demoUpgrade yast2-pkg-bindings-devel-docUpgrade libpackagekit-glib2-devel-32bitUpgrade PackageKitUpgrade zypper-log | Jul 26, 2019 | Dec 28, 2018 |
| Ubuntu | — | Upgrade libsolv-toolsUpgrade libsolv0Upgrade libsolvext0Upgrade libsolv0 (Ubuntu Pro)Upgrade libsolvext0 (Ubuntu Pro) | Apr 1, 2019 | Dec 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub