Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unf_extUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-mime-typesUpgrade python3-solvUpgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade tfm-rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-rest-clientUpgrade perl-solv-debuginfoUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-highlineUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade rubygem-amazing_printUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-highlineUpgrade python3-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-mime-types-dataUpgrade libsolv-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-runtimeUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unicodeUpgrade rubygem-unfUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade tfm-rubygem-unf_extUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-multi_jsonUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade tfm-rubygem-powerbarUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foreman_admin | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-develUpgrade libsolvUpgrade libsolv-tools | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | No solution existsUpgrade ruby-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade libsolvUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolv-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade python3-solvUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub