Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | May 18, 2021 |
| Amazon_linux_2023 | — | Upgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade python3-solvUpgrade perl-solv-debuginfoUpgrade libsolv-demoUpgrade libsolv-debuginfoUpgrade ruby-solv-debuginfoUpgrade ruby-solvUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-debugsourceUpgrade perl-solvUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools | Feb 17, 2025 | Dec 13, 2020 |
| Centos_linux | — | Upgrade rubygem-loggingUpgrade rubygem-highlineUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-mime-types-dataUpgrade python3-solvUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-mime-types-dataUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-jwtUpgrade tfm-rubygem-highlineUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-netrcUpgrade rubygem-hashieUpgrade libsolv-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade tfm-rubygem-amazing_printUpgrade libsolvUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-oauthUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-rest-clientUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_openscapUpgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-localeUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-runtimeUpgrade rubygem-unf_extUpgrade tfm-rubygem-unfUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hashieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-powerbar | Nov 10, 2021 | May 18, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsolv | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsolv | Sep 24, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsolv | Sep 29, 2021 | May 18, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv | Nov 17, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade python3-solv-debuginfoUpgrade libsolv-debugsourceUpgrade python3-solvUpgrade libsolv-develNo solution existsUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade libsolv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv | Nov 10, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libsolv-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-sql-debuginfoUpgrade python3-solvUpgrade libsolv-develUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | May 18, 2021 |
| Suse | — | Upgrade libsolv-toolsUpgrade libsolv-develUpgrade perl-solvUpgrade python-solvUpgrade libzyppUpgrade libzypp-devel-docUpgrade libzypp-devel | Jun 24, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub