Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-develUpgrade libsolv-tools | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-highlineUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unf_extUpgrade python3-solvUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-debuginfoUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-loggingUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade libsolv-debuginfoUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-netrcUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hashieUpgrade tfm-rubygem-unf_extUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-http-cookieUpgrade perl-solv-debuginfoUpgrade rubygem-localeUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-oauthUpgrade libsolv-debugsourceUpgrade rubygem-amazing_printUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade satellite-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-localeUpgrade tfm-runtimeUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-multi_jsonUpgrade python3-solv-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-unicodeUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-jwtUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-clampUpgrade libsolvUpgrade tfm-rubygem-hammer_cliUpgrade satellite-cloneUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_admin | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolvUpgrade libsolv-develUpgrade libsolv-toolsUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolv-demo-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsourceUpgrade libsolv-debuginfoUpgrade libsolvNo solution existsUpgrade python3-solv-debuginfoUpgrade python3-solvUpgrade perl-solv-debuginfoUpgrade libsolv-develUpgrade ruby-solv-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-tools-debuginfoUpgrade libsolv-debuginfoUpgrade libsolv-toolsUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolvUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub