Name: CVE-2021-33938: Out-of-bounds Write
Creator: Rapid7
Published: 2021-09-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-33938, CWE-787, CVSS 7.5, EPSS 0.01422

Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade libsolv-develUpgrade libsolv-tools	May 4, 2022	Sep 2, 2021
Centos_linux	—	Upgrade rubygem-rest-clientUpgrade rubygem-unfUpgrade rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-oauthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-oauthUpgrade tfm-rubygem-unfUpgrade rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade libsolvUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-localeUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-unicode-display_widthUpgrade python3-solv-debuginfoUpgrade tfm-rubygem-unicodeUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-types-dataUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade libsolv-debugsourceUpgrade rubygem-amazing_printUpgrade satellite-cliUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade ruby-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-loggingUpgrade foreman-cliUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unf_extUpgrade tfm-rubygem-unicode-debuginfoUpgrade python3-solvUpgrade libsolv-debuginfoUpgrade rubygem-localeUpgrade perl-solv-debuginfoUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-netrcUpgrade tfm-rubygem-amazing_printUpgrade rubygem-http-cookieUpgrade rubygem-highlineUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-hashieUpgrade libsolv-demo-debuginfoUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_azure_rm	Nov 9, 2021	Sep 2, 2021
Debian	—	Upgrade libsolv	Jul 30, 2024	Sep 2, 2021
Oracle_linux	—	Upgrade libsolv-toolsUpgrade libsolv-develUpgrade libsolvUpgrade python3-solv	Nov 3, 2021	Dec 13, 2020
Redhat_linux	—	Upgrade libsolv-tools-debuginfoUpgrade libsolv-demo-debuginfoUpgrade libsolvUpgrade libsolv-debugsourceUpgrade libsolv-debuginfoUpgrade libsolv-toolsUpgrade libsolv-develUpgrade python3-solvUpgrade ruby-solv-debuginfoNo solution existsUpgrade perl-solv-debuginfoUpgrade python3-solv-debuginfo	Nov 9, 2021	Sep 2, 2021
Rocky_linux	—	Upgrade python3-solvUpgrade libsolvUpgrade libdb-debuginfoUpgrade libsolv-toolsUpgrade python3-solv-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libdb-utils-debuginfoUpgrade libsolv-develUpgrade libdb-debugsourceUpgrade libsolv-debuginfoUpgrade libsolv-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo	May 5, 2022	Sep 2, 2021
Ubuntu	—	No solution exists	Jun 26, 2025	Sep 2, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence