Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade tfm-rubygem-multi_jsonUpgrade tfm-runtimeUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-domain_nameUpgrade libsolv-debugsourceUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-oauthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-apipie-bindingsUpgrade libsolvUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unfUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade satellite-cloneUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-rest-clientUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-netrcUpgrade rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-cliUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-jwtUpgrade rubygem-mime-types-dataUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade python3-solvUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unf_extUpgrade rubygem-netrcUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade perl-solv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade foreman-cliUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-typesUpgrade ruby-solv-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-highlineUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade libsolv-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-http-cookieUpgrade rubygem-unf_ext | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolvUpgrade python3-solv | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade libsolvUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsourceUpgrade ruby-solv-debuginfoNo solution existsUpgrade python3-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-solvUpgrade libsolv-devel | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolv-debugsourceUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-toolsUpgrade libdb-utils-debuginfoUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-develUpgrade libsolv-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libsolv | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub