Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | May 18, 2021 |
| Amazon_linux_2023 | — | Upgrade libsolv-develUpgrade perl-solv-debuginfoUpgrade ruby-solvUpgrade ruby-solv-debuginfoUpgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libsolv-debuginfoUpgrade libsolv-demoUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade perl-solvUpgrade libsolv-toolsUpgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfo | Feb 17, 2025 | Dec 13, 2020 |
| Centos_linux | — | Upgrade foreman-cliUpgrade rubygem-loggingUpgrade tfm-rubygem-highlineUpgrade rubygem-clampUpgrade python3-solvUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-loggingUpgrade rubygem-foreman_maintainUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-rest-clientUpgrade tfm-rubygem-unicode-display_widthUpgrade python3-solv-debuginfoUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debuginfoUpgrade rubygem-localeUpgrade tfm-rubygem-domain_nameUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-mime-types-dataUpgrade libsolv-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-amazing_printUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cliUpgrade rubygem-little-pluggerUpgrade rubygem-hashieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-runtimeUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-rest-clientUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_openscapUpgrade libsolv-debuginfoUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-http-cookieUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-oauthUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade perl-solv-debuginfoUpgrade rubygem-unicodeUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-jwt | Nov 10, 2021 | May 18, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Sep 24, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolvUpgrade libsolv-tools | Nov 17, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolv-demo-debuginfoUpgrade ruby-solv-debuginfoNo solution existsUpgrade libsolvUpgrade libsolv-debuginfoUpgrade perl-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-develUpgrade python3-solvUpgrade libsolv-debugsourceUpgrade python3-solv-debuginfo | Nov 10, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade libsolv-develUpgrade libdb-cxx-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade libdb-debugsourceUpgrade libsolv-debugsource | Mar 12, 2024 | May 18, 2021 |
| Suse | — | Upgrade libzyppUpgrade libzypp-devel-docUpgrade libzypp-develUpgrade python-solvUpgrade perl-solvUpgrade libsolv-toolsUpgrade libsolv-devel | Jun 24, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub