Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade libsolv-tools-debuginfoUpgrade rubygem-hashieUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade libsolv-demo-debuginfoUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade libsolvUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-cliUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade libsolv-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade rubygem-oauthUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade tfm-rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-clampUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-jwtUpgrade libsolv-debuginfoUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade python3-solvUpgrade satellite-cloneUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-highlineUpgrade tfm-runtime | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade ruby-solv-debuginfoUpgrade libsolvUpgrade libsolv-develUpgrade python3-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-solvUpgrade libsolv-debuginfoNo solution existsUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolvUpgrade libdb-utils-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade python3-solv-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub