Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foremanUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foremanUpgrade libsolv-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-highlineUpgrade rubygem-unicode-display_widthUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-clampUpgrade rubygem-hashieUpgrade rubygem-jwtUpgrade libsolv-debuginfoUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade libsolvUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade satellite-maintainUpgrade libsolv-demo-debuginfoUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-http-cookieUpgrade satellite-cliUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cliUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-multi_jsonUpgrade tfm-runtimeUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cli_katelloUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-cloneUpgrade rubygem-oauthUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-powerbarUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-powerbarUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-amazing_printUpgrade python3-solvUpgrade rubygem-amazing_printUpgrade rubygem-little-pluggerUpgrade rubygem-apipie-bindingsUpgrade rubygem-http-cookieUpgrade tfm-rubygem-unf_ext | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolvUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolv-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvNo solution existsUpgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade ruby-solv-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-develUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade libsolv-tools-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade python3-solvUpgrade libsolv-toolsUpgrade libdb-utils-debuginfoUpgrade libsolvUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libsolv-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub