Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hashieUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-little-pluggerUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-highlineUpgrade rubygem-localeUpgrade rubygem-hashieUpgrade tfm-rubygem-unf_extUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-http-cookieUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-localeUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-rest-clientUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade tfm-rubygem-jwtUpgrade rubygem-jwtUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade tfm-rubygem-clampUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauthUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-netrcUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-unfUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debuginfoUpgrade satellite-cloneUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode | Jul 14, 2022 | Feb 21, 2022 |
| Debian | — | Upgrade libsolv | Jul 30, 2024 | Feb 21, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsolv | Jun 9, 2023 | Feb 21, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade satellite-cloneUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-mime-typesUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cliUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foremanUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-jwtUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicodeUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-localeNo solution existsUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-clampUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade rubygem-netrcUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-amazing_printUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unicodeUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade tfm-rubygem-multi_jsonUpgrade tfm-runtimeUpgrade rubygem-highlineUpgrade rubygem-domain_nameUpgrade tfm-rubygem-netrcUpgrade foreman-cliUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-localeUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-http-cookie | Jul 14, 2022 | Feb 21, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | Feb 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub