There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | libsolv | <Â 0.6.36-1 | libsolv_0.6.36-1_all.deb |
Debian | 11 | all | libsolv | <Â 0.6.36-1 | libsolv_0.6.36-1_all.deb |
Debian | 10 | all | libsolv | <=Â 0.6.35-2+deb10u1 | libsolv_0.6.35-2+deb10u1_all.deb |
Debian | 999 | all | libsolv | <Â 0.6.36-1 | libsolv_0.6.36-1_all.deb |
Debian | 13 | all | libsolv | <Â 0.6.36-1 | libsolv_0.6.36-1_all.deb |