Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade libsolv-tools-debuginfoUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-types-dataUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_tasksUpgrade libsolvUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-domain_nameUpgrade satellite-cliUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-unicodeUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-powerbarUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade libsolv-debugsourceUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-localeUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-multi_jsonUpgrade libsolv-demo-debuginfoUpgrade rubygem-clampUpgrade python3-solvUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade perl-solv-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade rubygem-unf_extUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_katelloUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-loggingUpgrade rubygem-amazing_printUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-localeUpgrade satellite-cloneUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-runtimeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade libsolv-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade foreman-cliUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade rubygem-highline | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolvUpgrade libsolv-tools | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | No solution existsUpgrade libsolvUpgrade libsolv-debuginfoUpgrade ruby-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-develUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-demo-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade python3-solv-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub