Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade satellite-cliUpgrade rubygem-unfUpgrade tfm-rubygem-powerbarUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-domain_nameUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-mime-typesUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-localeUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-oauthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade libsolv-debugsourceUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-types-dataUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-highlineUpgrade rubygem-localeUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hashieUpgrade rubygem-loggingUpgrade python3-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade rubygem-jwtUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cliUpgrade libsolv-debuginfoUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-clampUpgrade foreman-cliUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-oauthUpgrade tfm-runtimeUpgrade rubygem-powerbarUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-http-cookieUpgrade rubygem-unf_extUpgrade python3-solvUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolvUpgrade libsolv-tools | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade python3-solvUpgrade perl-solv-debuginfoUpgrade libsolv-develUpgrade python3-solv-debuginfoUpgrade libsolv-debuginfoNo solution existsUpgrade ruby-solv-debuginfoUpgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade libsolv-demo-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libdb-utils-debuginfoUpgrade libsolvUpgrade libsolv-develUpgrade libsolv-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade python3-solv-debuginfoUpgrade python3-solv | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub