repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsolvalma-upgrade-python3-solv | May 4, 2022 | Jan 21, 2020 | |
| Centos_linux | — | centos-upgrade-libsolvcentos-upgrade-libsolv-debuginfocentos-upgrade-libsolv-debugsourcecentos-upgrade-libsolv-demo-debuginfocentos-upgrade-libsolv-tools-debuginfocentos-upgrade-perl-solv-debuginfocentos-upgrade-python3-solvcentos-upgrade-python3-solv-debuginfocentos-upgrade-ruby-solv-debuginfo | Nov 5, 2020 | Jan 21, 2020 |
| Debian | debian-upgrade-libsolv | Feb 3, 2020 | Jan 21, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-libsolvoracle-linux-upgrade-python3-solv | Nov 12, 2020 | Jan 21, 2020 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 15, 2021 | Jan 21, 2020 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libsolvredhat-upgrade-libsolv-debuginforedhat-upgrade-libsolv-debugsourceredhat-upgrade-libsolv-demo-debuginforedhat-upgrade-libsolv-tools-debuginforedhat-upgrade-perl-solv-debuginforedhat-upgrade-python3-solvredhat-upgrade-python3-solv-debuginforedhat-upgrade-ruby-solv-debuginfo | Nov 5, 2020 | Jan 21, 2020 | |
| Suse | — | suse-upgrade-libsolv-develsuse-upgrade-libsolv-toolssuse-upgrade-libzyppsuse-upgrade-libzypp-develsuse-upgrade-libzypp-devel-docsuse-upgrade-perl-solvsuse-upgrade-python-solv | Jun 24, 2021 | Jan 21, 2020 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Jan 21, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub