repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-solvUpgrade libsolv | May 4, 2022 | Jan 21, 2020 |
| Centos_linux | — | Upgrade python3-solvUpgrade libsolv-demo-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv-debuginfoUpgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsource | Nov 5, 2020 | Jan 21, 2020 |
| Debian | — | Upgrade libsolv | Feb 3, 2020 | Jan 21, 2020 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv | Nov 12, 2020 | Jan 21, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 15, 2021 | Jan 21, 2020 |
| Redhat_linux | — | Upgrade libsolv-debuginfoUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade ruby-solv-debuginfoUpgrade libsolvNo solution existsUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsource | Nov 5, 2020 | Jan 21, 2020 |
| Suse | — | Upgrade libsolv-toolsUpgrade perl-solvUpgrade libzyppUpgrade libzypp-develUpgrade libsolv-develUpgrade python-solvUpgrade libzypp-devel-doc | Jun 24, 2021 | Jan 21, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 21, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub