Name: CVE-2021-33938: Out-of-bounds Write
Creator: Rapid7
Published: 2021-09-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-33938, CWE-787, CVSS 7.5, EPSS 0.0006

Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade libsolv-toolsUpgrade libsolv-devel	May 4, 2022	Sep 2, 2021
Centos_linux	—	Upgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-netrcUpgrade rubygem-rest-clientUpgrade satellite-cloneUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade rubygem-unicodeUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unfUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-oauthUpgrade libsolv-debugsourceUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-multi_jsonUpgrade satellite-cliUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-localeUpgrade tfm-runtimeUpgrade tfm-rubygem-powerbarUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foremanUpgrade python3-solv-debuginfoUpgrade libsolvUpgrade rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade ruby-solv-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-typesUpgrade libsolv-demo-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade foreman-cliUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-localeUpgrade rubygem-unf_extUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade libsolv-debuginfoUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-unf_extUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-amazing_printUpgrade rubygem-netrcUpgrade python3-solvUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_templates	Nov 9, 2021	Sep 2, 2021
Debian	—	Upgrade libsolv	Jul 30, 2024	Sep 2, 2021
Oracle_linux	—	Upgrade python3-solvUpgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolv	Nov 3, 2021	Dec 13, 2020
Redhat_linux	—	No solution existsUpgrade ruby-solv-debuginfoUpgrade perl-solv-debuginfoUpgrade python3-solvUpgrade python3-solv-debuginfoUpgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv-tools-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolv	Nov 9, 2021	Sep 2, 2021
Rocky_linux	—	Upgrade libdb-cxxUpgrade libsolv-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libsolv-develUpgrade python3-solvUpgrade libsolv-toolsUpgrade libsolvUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libsolv-tools-debuginfoUpgrade python3-solv-debuginfoUpgrade libdb-debugsourceUpgrade libsolv-debuginfoUpgrade libdb-utils-debuginfo	May 5, 2022	Sep 2, 2021
Ubuntu	—	No solution exists	Jun 26, 2025	Sep 2, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence