Name: CVE-2021-33928: Out-of-bounds Write
Creator: Rapid7
Published: 2021-09-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-33928, CWE-787, CVSS 7.5, EPSS 0.0006

Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade libsolv-toolsUpgrade libsolv-devel	May 4, 2022	Sep 2, 2021
Centos_linux	—	Upgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-typesUpgrade rubygem-clampUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_katelloUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-jwtUpgrade rubygem-unicode-display_widthUpgrade libsolvUpgrade satellite-maintainUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cliUpgrade tfm-rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-powerbarUpgrade rubygem-netrcUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-loggingUpgrade rubygem-unicode-debugsourceUpgrade rubygem-amazing_printUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-amazing_printUpgrade foreman-cliUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-typesUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-runtimeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade tfm-rubygem-loggingUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade perl-solv-debuginfoUpgrade rubygem-jwtUpgrade libsolv-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-oauthUpgrade python3-solvUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-locale	Nov 9, 2021	Sep 2, 2021
Debian	—	Upgrade libsolv	Jul 30, 2024	Sep 2, 2021
Oracle_linux	—	Upgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-develUpgrade python3-solv	Nov 3, 2021	Dec 13, 2020
Redhat_linux	—	Upgrade perl-solv-debuginfoUpgrade libsolvUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-debuginfoUpgrade python3-solvUpgrade libsolv-develNo solution existsUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools	Nov 9, 2021	Sep 2, 2021
Rocky_linux	—	Upgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libdb-utils-debuginfoUpgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-develUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libsolv-debuginfoUpgrade libdb-cxxUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libdb-debugsource	May 5, 2022	Sep 2, 2021
Ubuntu	—	No solution exists	Jun 26, 2025	Sep 2, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence