Buffer Over-read

libsolv.so is susceptible to buffer over-read. The attack exists when the length of last schema in data-schemadata is less than the length of input schema, leading to a buffer overflow in repodataschema2id in repodata.c...

CVE-2019-20387

repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...