Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

🗓️ 08 Sep 2021 07:00:00Reported by MicrosoftType

Buffer overflow in pool_installable_whatprovides in src/repo.h of libsolv before 0.7.17 allows denial of service.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	8 Nov 202515:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0076: libsolv (ALINUX3-SA-2021:0076)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libsolv (ALSA-2021:4060)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : libsolv (CESA-2021:4060)	3 Nov 202100:00	–	nessus
Tenable Nessus	MiracleLinux 8 : libsolv-0.7.16-3.el8 (AXSA:2021-2517:03)	20 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.02 : libsolv Multiple Vulnerabilities (NS-SA-2022-0092)	14 Nov 202200:00	–	nessus
Tenable Nessus	Oracle Linux 8 : libsolv (ELSA-2021-4060)	2 Nov 202100:00	–	nessus
Tenable Nessus	RHEL 8 : libsolv (RHSA-2021:4060)	2 Nov 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Satellite 6.11 Release (Moderate) (RHSA-2022:5498)	28 Apr 202400:00	–	nessus

Vulners

Node

08 Sep 2021 07:00Current

8.7High risk

Vulners AI Score8.7

CVSS 25

CVSS 3.17.5

EPSS0.00058