vulnerability

Red Hat: CVE-2018-20534: CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Dec 28, 2018
Added
Aug 7, 2019
Modified
Aug 11, 2025

Description

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

Solutions

redhat-upgrade-createrepo_credhat-upgrade-createrepo_c-debuginforedhat-upgrade-createrepo_c-debugsourceredhat-upgrade-createrepo_c-develredhat-upgrade-createrepo_c-libsredhat-upgrade-createrepo_c-libs-debuginforedhat-upgrade-dnfredhat-upgrade-dnf-automaticredhat-upgrade-dnf-dataredhat-upgrade-dnf-plugins-coreredhat-upgrade-libcompsredhat-upgrade-libcomps-debuginforedhat-upgrade-libcomps-debugsourceredhat-upgrade-libcomps-develredhat-upgrade-libdnfredhat-upgrade-libdnf-debuginforedhat-upgrade-libdnf-debugsourceredhat-upgrade-libreporedhat-upgrade-librepo-debuginforedhat-upgrade-librepo-debugsourceredhat-upgrade-librhsmredhat-upgrade-librhsm-debuginforedhat-upgrade-librhsm-debugsourceredhat-upgrade-libsolvredhat-upgrade-libsolv-debuginforedhat-upgrade-libsolv-debugsourceredhat-upgrade-libsolv-demoredhat-upgrade-libsolv-demo-debuginforedhat-upgrade-libsolv-develredhat-upgrade-libsolv-toolsredhat-upgrade-libsolv-tools-debuginforedhat-upgrade-microdnfredhat-upgrade-microdnf-debuginforedhat-upgrade-microdnf-debugsourceredhat-upgrade-perl-solv-debuginforedhat-upgrade-python2-solvredhat-upgrade-python3-createrepo_credhat-upgrade-python3-createrepo_c-debuginforedhat-upgrade-python3-dnfredhat-upgrade-python3-dnf-plugin-versionlockredhat-upgrade-python3-dnf-plugins-coreredhat-upgrade-python3-hawkeyredhat-upgrade-python3-hawkey-debuginforedhat-upgrade-python3-libcompsredhat-upgrade-python3-libcomps-debuginforedhat-upgrade-python3-libdnfredhat-upgrade-python3-libdnf-debuginforedhat-upgrade-python3-libreporedhat-upgrade-python3-librepo-debuginforedhat-upgrade-python3-solv-debuginforedhat-upgrade-ruby-solv-debuginforedhat-upgrade-yumredhat-upgrade-yum-utils
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.