Lucene search
+L

542 matches found

OSV
OSV
added 2022/04/07 2:19 p.m.4 views

SUSE-SU-2022:1128-1 Security update for libsolv, libzypp

This update for libsolv, libzypp fixes the following issues: libsolv to 0.6.39: - fix memory leaks in SWIG generated code - fix misparsing of '&' in attributes with libxml2 - try to keep packages from a cycle close togther in the transaction order bsc1189622 - fix split provides not working if th...

7.2AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.7 views

The vulnerability of the `pool_disabled_solvable` function in the `src/repo.h` component of the Libsolv library allows a malicious actor to trigger a service failure.

The vulnerability of the pooldisabledsolvable function in the src/repo.h file of the Libsolv library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.8CVSS7.1AI score0.01441EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.10 views

The vulnerability of the `pool_installable` function in the `src/repo.h` file of the Libsolv library allows a hacker to trigger a service failure.

The vulnerability of the poolinstallable function in the src/repo.h file of the Libsolv library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service failure...

7.8CVSS7.1AI score0.01462EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.7 views

The vulnerability of the `prune_to_recommended` function in the `src/policy.c` file of the Libsolv library, which is related to buffer overflow attacks, allows attackers to trigger a service denial.

The vulnerability of the prunetorecommended function in the src/policy.c file of the Libsolv library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.8CVSS7.2AI score0.01422EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.6 views

The vulnerability of the `pool_installable_whatprovides` function in the `src/repo.h` file of the Libsolv library allows a attacker to cause a service failure.

The vulnerability of the poolinstallablewhatprovides function in the src/repo.h file of the Libsolv library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to cause service failures...

7.8CVSS7.2AI score0.01462EPSS
SaveExploits1References5Affected Software2
OSV
OSV
added 2022/03/12 11:3 a.m.8 views

OESA-2022-1569 libsolv security update

A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: Security Fixes: Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies function a...

6.5CVSS7.5AI score0.01794EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2022/03/02 12:0 a.m.21 views

Fedora: Security Advisory for libsolv (FEDORA-2022-f8921a3891)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

3.8AI score
SaveExploits0References2
Fedora
Fedora
added 2022/03/01 3:5 p.m.59 views

[SECURITY] Fedora 35 Update: libsolv-0.7.21-1.fc35

A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package...

2.5AI score
SaveExploits0
CNVD
CNVD
added 2022/02/23 12:0 a.m.44 views

libsolv Heap Overflow Vulnerability

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

2AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.74 views

libsolv buffer overflow vulnerability

libsolv is a library for checking package dependencies. libsolv suffers from a buffer overflow vulnerability that stems from two heap overflow vulnerabilities in the resolvedependencies function in src/solver.c in the decision mapping variable, which can be exploited by an attacker to cause a...

6.5CVSS5.2AI score0.01794EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.46 views

libsolv Heap Overflow Vulnerability (CNVD-2022-15954)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

2AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.57 views

libsolv Heap Overflow Vulnerability (CNVD-2022-15951)

libsolv is a library for checking package dependencies. libsolv is vulnerable to a heap overflow vulnerability, which stems from the existence of two memory vulnerabilities in libsolv located in the resolveweak function in src/solver.c. No detailed vulnerability details are currently available...

1.8AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.48 views

libsolv Heap Overflow Vulnerability (CNVD-2022-15953)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

2AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.44 views

libsolv Heap Overflow Vulnerability (CNVD-2022-15952)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

2AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.75 views

libsolv Heap Overflow Vulnerability (CNVD-2022-15950)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

2AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.61 views

libsolv buffer overflow vulnerability (CNVD-2022-15957)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

3.6AI score
SaveExploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.53 views

libsolv Heap Overflow Vulnerability (CNVD-2022-15955)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2022/02/22 10:21 p.m.58 views

CVE-2021-44568

A buffer over-read flaw was found in the test case reader in libsolv that created multiple out-of-bounds read symptoms. Depending on how client applications use libsolv, this flaw leads to a denial of service of the application if an attacker can supply crafted input to the test case reader...

6.5CVSS2.3AI score0.01794EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2022/02/21 7:38 p.m.56 views

CVE-2021-44577

Removed by vendor...

6.7AI score
SaveExploits0
Debian CVE
Debian CVE
added 2022/02/21 7:33 p.m.41 views

CVE-2021-44576

Removed by vendor...

6.7AI score
SaveExploits0
Rows per page
Query Builder