CVE-2021-3200

CVE-2021-3200 is a buffer overflow in libsolv (2020-12-13 solver testcase_read path) that could cause a denial of service. The vulnerability affects libsolv components handling Testcase reads and causes memory overflow when input size exceeds destination buffer. Connected IBM bulletin entries als...

CVE-2019-20387

CVE-2019-20387: heap-based buffer over-read in repodata_schema2id() of libsolv (repodata.c) causing potential crash. Affected: Cloud Pak for Security (CP4S) versions 1.8.1.0, 1.8.0.0, 1.7.2.0. Root cause: last schema length shorter than input schema leading to over-read. Remediation: upgrade to C...

CVE-2021-44568

CVE-2021-44568 describes two heap-overflow vulnerabilities in openSUSE/libsolv/libsolv that could allow an attacker to cause a remote Denial of Service via the decisionmap/resolve_dependencies path in libsolv. The connected IBM/Red Hat/NCSC/Nessus entries corroborate the issue and reference affec...