Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | May 18, 2021 |
| Amazon_linux_2023 | — | Upgrade libsolv-demo-debuginfoUpgrade libsolv-debugsourceUpgrade perl-solvUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-demoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-tools-debuginfoUpgrade libsolv-develUpgrade ruby-solvUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv-debuginfo | Feb 17, 2025 | Dec 13, 2020 |
| Centos_linux | — | Upgrade rubygem-clampUpgrade rubygem-rest-clientUpgrade rubygem-hashieUpgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade rubygem-amazing_printUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unfUpgrade libsolv-debugsourceUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-highlineUpgrade python3-solvUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-little-pluggerUpgrade rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade tfm-rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foremanUpgrade python3-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-oauthUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-rest-clientUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-http-cookieUpgrade ruby-solv-debuginfoUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-amazing_printUpgrade satellite-cliUpgrade rubygem-apipie-bindingsUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-runtimeUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_openscapUpgrade libsolv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-powerbarUpgrade rubygem-unicodeUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-unicode-display_widthUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debugsource | Nov 10, 2021 | May 18, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Sep 24, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolvUpgrade libsolv-tools | Nov 17, 2021 | Dec 13, 2020 |
| Redhat_linux | — | No solution existsUpgrade libsolvUpgrade libsolv-demo-debuginfoUpgrade ruby-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-develUpgrade libsolv-debugsource | Nov 10, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libdb-utils-debuginfoUpgrade libsolv-debuginfoUpgrade libdb-debuginfoUpgrade libsolv-develUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libdb-sql-devel-debuginfoUpgrade libsolvUpgrade libdb-debugsource | Mar 12, 2024 | May 18, 2021 |
| Suse | — | Upgrade libzyppUpgrade libzypp-develUpgrade libzypp-devel-docUpgrade libsolv-develUpgrade perl-solvUpgrade python-solvUpgrade libsolv-tools | Jun 24, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub