Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-netrcUpgrade libsolv-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-unicodeUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-oauthUpgrade tfm-rubygem-powerbarUpgrade rubygem-unicode-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-oauthUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-unfUpgrade python3-solv-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debugsourceUpgrade satellite-cliUpgrade tfm-rubygem-localeUpgrade libsolvUpgrade rubygem-hammer_cliUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-runtimeUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-http-cookieUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-typesUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade libsolv-debuginfoUpgrade python3-solvUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade rubygem-loggingUpgrade rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-little-pluggerUpgrade perl-solv-debuginfoUpgrade libsolv-tools-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-devel | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade perl-solv-debuginfoUpgrade libsolv-develUpgrade python3-solvUpgrade ruby-solv-debuginfoNo solution existsUpgrade python3-solv-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfo | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade libsolv-debuginfoUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libsolvUpgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolv-debugsource | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub