MiracleLinux 8 : libsolv-0.7.11-1.el8 (AXSA:2021-1307:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1307:01 advisory. libsolv: out-of-bounds read in repodataschema2id in repodata.c CVE-2019-20387 Tenable has extracted the preceding description block directly from the...

SUSE CVE-2019-20387

repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...

libsolv: out-of-bounds read in repodata_schema2id in repodata.c

An out-of-bounds read was discovered in Libsolv when the last schema has a length that is less than the length of the input schema. A remote attacker may abuse this flaw to crash an application that uses Libsolv...

CVE-2019-20387

repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...

CVE-2019-20387

repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...

PT-2020-10413 · Opensuse +3 · Libsolv +3

Name of the Vulnerable Software and Affected Versions: libsolv versions prior to 0.7.6 Description: The issue is related to a heap-based buffer over-read in the repodata schema2id function in repodata.c. This occurs when the length of the last schema is less than the length of the input schema...