Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | May 18, 2021 |
| Amazon_linux_2023 | — | Upgrade python3-solv-debuginfoUpgrade libsolv-demoUpgrade libsolv-tools-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv-debuginfoUpgrade python3-solvUpgrade libsolv-develUpgrade ruby-solvUpgrade libsolvUpgrade perl-solv-debuginfoUpgrade perl-solvUpgrade libsolv-demo-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsource | Feb 17, 2025 | Dec 13, 2020 |
| Centos_linux | — | Upgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade python3-solvUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-jwtUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-highlineUpgrade rubygem-localeUpgrade foreman-cliUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-highlineUpgrade rubygem-oauthUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-foreman_maintainUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foremanUpgrade python3-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade libsolv-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unfUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-little-pluggerUpgrade rubygem-hashieUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade libsolv-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-runtimeUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_extUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-http-cookieUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-oauthUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cliUpgrade libsolvUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade perl-solv-debuginfo | Nov 10, 2021 | May 18, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Sep 24, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Oracle_linux | — | Upgrade libsolvUpgrade libsolv-toolsUpgrade python3-solvUpgrade libsolv-devel | Nov 17, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade python3-solvUpgrade libsolv-debugsourceUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libsolv-debuginfoUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade ruby-solv-debuginfoNo solution exists | Nov 10, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade libsolv-debugsourceUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-debuginfoUpgrade libsolv-develUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfo | Mar 12, 2024 | May 18, 2021 |
| Suse | — | Upgrade libzypp-develUpgrade libzyppUpgrade libzypp-devel-docUpgrade libsolv-develUpgrade perl-solvUpgrade libsolv-toolsUpgrade python-solv | Jun 24, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub