Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-unfUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-oauthUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unf_extUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-debugsourceUpgrade tfm-runtimeUpgrade satellite-cliUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-amazing_printUpgrade rubygem-amazing_printUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade perl-solv-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade rubygem-unf_extUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade ruby-solv-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-oauthUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade python3-solvUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-domain_nameUpgrade satellite-maintainUpgrade tfm-rubygem-hashieUpgrade rubygem-highlineUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foremanUpgrade libsolv-debugsourceUpgrade rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-highlineUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-foreman_maintainUpgrade libsolv-demo-debuginfoUpgrade libsolv-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-little-pluggerUpgrade libsolvUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-clampUpgrade rubygem-unicode-debuginfoUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unicode | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade ruby-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade libsolv-demo-debuginfoUpgrade libsolvUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libsolv-tools-debuginfoNo solution existsUpgrade libsolv-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade python3-solv-debuginfoUpgrade libdb-debuginfoUpgrade libsolv-develUpgrade libsolv-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-toolsUpgrade libdb-utils-debuginfoUpgrade python3-solvUpgrade libdb-sql-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolvUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub