Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade libsolv-devel | May 4, 2022 | Sep 2, 2021 |
| Centos_linux | — | Upgrade rubygem-hashieUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_ext-debuginfoUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hashieUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade rubygem-unf_extUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade ruby-solv-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foremanUpgrade libsolv-tools-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-highlineUpgrade python3-solvUpgrade rubygem-localeUpgrade rubygem-powerbarUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade libsolv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-amazing_printUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unf_extUpgrade rubygem-netrcUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-clampUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-unfUpgrade rubygem-domain_nameUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-netrcUpgrade rubygem-unicodeUpgrade rubygem-jwtUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-runtimeUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-display_widthUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-amazing_printUpgrade libsolv-debugsourceUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unicodeUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-oauthUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_remote_execution | Nov 9, 2021 | Sep 2, 2021 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Sep 2, 2021 |
| Oracle_linux | — | Upgrade python3-solvUpgrade libsolv-toolsUpgrade libsolvUpgrade libsolv-devel | Nov 3, 2021 | Dec 13, 2020 |
| Redhat_linux | — | Upgrade perl-solv-debuginfoNo solution existsUpgrade python3-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolv-develUpgrade python3-solvUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade libsolvUpgrade libsolv-demo-debuginfoUpgrade libsolv-debuginfoUpgrade libsolv-tools | Nov 9, 2021 | Sep 2, 2021 |
| Rocky_linux | — | Upgrade libsolvUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-debuginfoUpgrade libsolv-develUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade python3-solvUpgrade libsolv-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx | May 5, 2022 | Sep 2, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 2, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub