Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-typesUpgrade rubygem-localeUpgrade libsolv-debuginfoUpgrade python3-solvUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hashieUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-netrcUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade perl-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade rubygem-http-cookieUpgrade satellite-maintainUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hashieUpgrade rubygem-highlineUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade rubygem-multi_jsonUpgrade ruby-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-oauthUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-oauthUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-localeUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-clampUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-amazing_printUpgrade libsolv-debugsourceUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicodeUpgrade rubygem-unfUpgrade satellite-cloneUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-jwtUpgrade python3-solv-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-jwtUpgrade rubygem-unicode-display_width | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade python3-solvNo solution exists | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libdb-utils-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libdb-debuginfoUpgrade libsolvUpgrade python3-solvUpgrade libdb-sql-devel-debuginfoUpgrade python3-solv-debuginfo | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub