Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicodeUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade foreman-cliUpgrade libsolv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unicode-display_widthUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hashieUpgrade rubygem-netrcUpgrade rubygem-clampUpgrade rubygem-unicode-debuginfoUpgrade libsolv-tools-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-loggingUpgrade libsolv-debugsourceUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-highlineUpgrade libsolvUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-powerbarUpgrade rubygem-unfUpgrade python3-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cloneUpgrade rubygem-oauthUpgrade rubygem-mime-typesUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-http-cookieUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade python3-solvUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade tfm-runtimeUpgrade rubygem-http-cookieUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-multi_json | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolvUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade ruby-solv-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-develNo solution existsUpgrade libsolvUpgrade libsolv-tools-debuginfoUpgrade libsolv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solv | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade python3-solv-debuginfoUpgrade libdb-debugsourceUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-toolsUpgrade libsolvUpgrade libdb-sql-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libdb-debuginfoUpgrade libsolv-devel | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub