633 matches found
libsolv: NULL pointer dereference in function testcase_read
There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service...
Low: Red Hat Security Advisory: libsolv security and bug fix update
An update for libsolv is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
libsolv: illegal address access in pool_whatprovides in src/pool.h
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application...
SUSE-SU-2019:2030-1 Security update for zypper, libzypp and libsolv
This update for libzypp and libsolv fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c function testcaseread bsc1120629. - CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c function testcasestr2depcomplex in...
SUSE SLED12 / SLES12 Security Update : libsolv, libzypp, zypper (SUSE-SU-2019:1972-1)
This update for libsolv, libzypp and zypper fixes the following issues : libsolv was updated to version 0.6.36 fixes the following issues : Security issues fixed : CVE-2018-20532: Fixed a NULL pointer dereference in testcaseread bsc1120629. CVE-2018-20533: Fixed a NULL pointer dereference in...
SUSE-SU-2019:1972-1 Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp and zypper fixes the following issues: libsolv was updated to version 0.6.36 fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed a NULL pointer dereference in testcaseread bsc1120629. - CVE-2018-20533: Fixed a NULL pointer dereference in...
EulerOS 2.0 SP8 : libsolv (EulerOS-SA-2019-1652)
According to the versions of the libsolv package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third...
MGASA-2019-0154 Updated libsolv packages fix security vulnerability
It was discovered that libsolv incorrectly handled certain malformed input. If a user or automated system were tricked into opening a specially crafted file, applications that rely on libsolv could be made to crash, resulting in a denial of service CVE-2018-20532-4...
Updated libsolv packages fix security vulnerability
It was discovered that libsolv incorrectly handled certain malformed input. If a user or automated system were tricked into opening a specially crafted file, applications that rely on libsolv could be made to crash, resulting in a denial of service CVE-2018-20532-4...
The vulnerability of the testcase_str2dep_complex function in the libsolv library, which allows a hacker to cause a service failure.
The vulnerability of the testcasestr2depcomplex function in the library libsolv ext/testcase.c is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the pool_whatprovides function in the libsolv library, which allows a hacker to trigger a service failure.
The vulnerability of the poolwhatprovides function src/pool.h in the libsolv library is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the libsolv library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.
The vulnerability of the testcaseread function in the libsolv library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Ubuntu: Security Advisory (USN-3916-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : libzypp / zypper (openSUSE-2019-685)
This update for libzypp, zypper, libsolv provides the following fixes : Security fixes in libzypp : - CVE-2018-7685: PackageProvider: Validate RPMs before caching bsc1091624, bsc1088705 - CVE-2017-9269: Be sure bad packages do not stay in the cache bsc1045735 Changes in libzypp : - Update to...
Denial Of Service (DoS)
libsolv.so is vulnerable to denial of service DoS. The vulnerability is possible due to illegal address access that leads to a null pointer dereference via the testcaseread function in ext/testcase.c...
Ubuntu 18.10 : libsolv vulnerabilities (USN-3916-1)
It was discovered that libsolv incorrectly handled certain malformed input. If a user or automated system were tricked into opening a specially crafted file, applications that rely on libsolv could be made to crash, resulting in a denial of service. Note that Tenable Network Security has extracte...
USN-3916-1: libsolv vulnerabilities
It was discovered that libsolv incorrectly handled certain malformed input. If a user or automated system were tricked into opening a specially crafted file, applications that rely on libsolv could be made to crash, resulting in a denial of service...
Photon OS 2.0: Libsolv PHSA-2019-2.0-0136
An update of the libsolv package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0136. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 1.0: Libsolv PHSA-2019-1.0-0212
An update of the libsolv package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0212. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
