Name: CVE-2021-33928: Out-of-bounds Write
Creator: Rapid7
Published: 2021-09-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-33928, CWE-787, CVSS 7.5, EPSS 0.0006

Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade libsolv-develUpgrade libsolv-tools	May 4, 2022	Sep 2, 2021
Centos_linux	—	Upgrade tfm-rubygem-jwtUpgrade tfm-rubygem-localeUpgrade satellite-cliUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-powerbarUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unfUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-little-pluggerUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicodeUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolvUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-multi_jsonUpgrade satellite-maintainUpgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-unf_extUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade libsolv-tools-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-loggingUpgrade rubygem-unf_extUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-localeUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade libsolv-debuginfoUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade tfm-runtimeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade foreman-cliUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unfUpgrade ruby-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-amazing_printUpgrade rubygem-loggingUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-highlineUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_tasks	Nov 9, 2021	Sep 2, 2021
Debian	—	Upgrade libsolv	Jul 30, 2024	Sep 2, 2021
Oracle_linux	—	Upgrade python3-solvUpgrade libsolv-develUpgrade libsolvUpgrade libsolv-tools	Nov 3, 2021	Dec 13, 2020
Redhat_linux	—	Upgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolvUpgrade libsolv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-develNo solution existsUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-debugsource	Nov 9, 2021	Sep 2, 2021
Rocky_linux	—	Upgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libsolv-debuginfoUpgrade libsolv-develUpgrade libdb-sql-debuginfoUpgrade python3-solvUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade libsolvUpgrade libsolv-toolsUpgrade libdb-utils-debuginfo	May 5, 2022	Sep 2, 2021
Ubuntu	—	No solution exists	Jun 26, 2025	Sep 2, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence