Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-foreman_maintainUpgrade satellite-maintainUpgrade tfm-rubygem-rest-clientUpgrade rubygem-powerbarUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_extUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicodeUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-oauthUpgrade tfm-rubygem-http-cookieUpgrade rubygem-clampUpgrade python3-solvUpgrade perl-solv-debuginfoUpgrade libsolvUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade ruby-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unicode-debuginfoUpgrade satellite-cliUpgrade tfm-rubygem-powerbarUpgrade rubygem-mime-types-dataUpgrade rubygem-unicodeUpgrade rubygem-loggingUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unf_extUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade satellite-cloneUpgrade rubygem-domain_nameUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-domain_nameUpgrade tfm-runtimeUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-clampUpgrade rubygem-unfUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-jwtUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-jwtUpgrade libsolv-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade libsolv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debugsourceUpgrade libsolv-tools-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-unicode-display_width | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-develUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | No solution existsUpgrade libsolv-demo-debuginfoUpgrade libsolv-debugsourceUpgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade python3-solvUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libsolv-develUpgrade libsolvUpgrade libsolv-debugsourceUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-tools | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub