Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade satellite-maintainUpgrade tfm-rubygem-unicodeUpgrade rubygem-powerbarUpgrade tfm-rubygem-highlineUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolvUpgrade perl-solv-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade ruby-solv-debuginfoUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade foreman-cliUpgrade rubygem-fast_gettextUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade python3-solvUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-oauthUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-netrcUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-amazing_printUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-multi_jsonUpgrade satellite-cloneUpgrade tfm-rubygem-localeUpgrade rubygem-domain_nameUpgrade libsolv-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade tfm-rubygem-oauthUpgrade rubygem-unfUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-domain_nameUpgrade rubygem-amazing_printUpgrade tfm-runtimeUpgrade rubygem-apipie-bindingsUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-loggingUpgrade libsolv-debuginfoUpgrade rubygem-mime-typesUpgrade tfm-rubygem-unf_extUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-jwt | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-develUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-demo-debuginfoUpgrade libsolv-debugsourceNo solution existsUpgrade libsolv-tools-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolv-develUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolv-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolv-develUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade libsolvUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-devel-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solv | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub