Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade libsolv-tools-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-domain_nameUpgrade rubygem-highlineUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade libsolvUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-loggingUpgrade tfm-rubygem-highlineUpgrade rubygem-jwtUpgrade satellite-maintainUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-netrcUpgrade rubygem-foreman_maintainUpgrade rubygem-clampUpgrade libsolv-debuginfoUpgrade libsolv-debugsourceUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-unicodeUpgrade rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-http-cookieUpgrade tfm-rubygem-http-cookieUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-amazing_printUpgrade rubygem-multi_jsonUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-oauthUpgrade rubygem-mime-typesUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-cloneUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade python3-solvUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-clampUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-mime-typesUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cliUpgrade tfm-runtimeUpgrade rubygem-unfUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade ruby-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rm | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-toolsUpgrade libsolv-develUpgrade python3-solvUpgrade libsolv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade python3-solv-debuginfoUpgrade python3-solvNo solution existsUpgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolv-demo-debuginfoUpgrade libsolv-debugsourceUpgrade ruby-solv-debuginfoUpgrade perl-solv-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-debuginfoUpgrade libsolv-develUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade python3-solvUpgrade libsolv-toolsUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolvUpgrade libdb-cxx-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-cxx | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub