Lucene search
+L

534 matches found

Tenable Nessus
Tenable Nessus
added 2 days ago7 views

Photon OS 5.0: Libsolv PHSA-2026-5.0-0935

An update of the libsolv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0935. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

6.5CVSS5.4AI score0.00409EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 3 days ago9 views

libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption a...

6.5CVSS5.9AI score0.00409EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 3 days ago6 views

libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file, which, when processed by a vulnerable application, can lea...

7.8CVSS5.7AI score0.00227EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 3 days ago9 views

Moderate: Red Hat Security Advisory: libsolv security update

An update for libsolv is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS5.9AI score0.00409EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 3 days ago7 views

libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing negative size values in the repoaddsolv function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could...

6.5CVSS5.7AI score0.00312EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 3 days ago7 views

Moderate: Red Hat Security Advisory: libsolv security update

An update for libsolv is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS5.9AI score0.00227EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 3 days ago7 views

libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file, which, when processed by a vulnerable application, can lea...

7.8CVSS5.7AI score0.00227EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 3 days ago7 views

Moderate: Red Hat Security Advisory: libsolv security update

An update for libsolv is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit...

7.8CVSS5.9AI score0.00227EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 3 days ago9 views

libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file, which, when processed by a vulnerable application, can lea...

7.8CVSS5.7AI score0.00227EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 3 days ago5 views

RHEL 9 : libsolv (RHSA-2026:48813)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48813 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...

7.8CVSS6AI score0.00227EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 3 days ago6 views

RHEL 8 : libsolv (RHSA-2026:48817)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48817 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...

7.8CVSS6AI score0.00227EPSS
SaveExploits1References5
Photon
Photon
added 3 days ago5 views

Moderate Photon OS Security Update - PHSA-2026-5.0-0935

Updates of 'libsolv' packages of Photon OS have been released...

6.5CVSS5.5AI score0.00409EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 3 days ago5 views

RHEL 9 : libsolv (RHSA-2026:48811)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48811 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...

7.8CVSS6AI score0.00227EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 12:10 p.m.13 views

Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images

Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2025-13151 DESCRIPTION: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...

9.8CVSS6.3AI score0.02298EPSS
SaveExploits3Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/07/17 8:1 a.m.7 views

Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

...

7.5CVSS5.2AI score0.0047EPSS
SaveExploits0
NVD
NVD
added 2026/07/16 1:16 a.m.11 views

CVE-2026-48863

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processin...

7.5CVSS0.0047EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/16 12:46 a.m.16 views

CVE-2026-48863

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processin...

7.5CVSS6.2AI score0.0047EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/07/16 12:46 a.m.14 views

EUVD-2026-44842

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processin...

7.5CVSS6.2AI score0.0047EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 12:46 a.m.144 views

CVE-2026-48863

The CVE-2026-48863 issue is a stack-based buffer overflow in libsolv’s EdDSA verification when copying the EdDSA 's' MPI, caused by length handling. An adversary could craft an Ed25519 PGP signature with mismatched MPI lengths to trigger a denial of service in automated package/repo processing wo...

7.5CVSS6.2AI score0.0047EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/16 12:46 a.m.41 views

CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processin...

7.5CVSS0.0047EPSS
SaveExploits0References3
Rows per page
Query Builder