CVE-2018-20534

CVE-2018-20534 refers to an illegal address access in libsolv.a (libsolv) in versions up to 0.7.2, which the sources describe as causing a denial of service. The issue is echoed across multiple advisories (e.g., Ubuntu USN-4851, Oracle Linux ELSA, AlmaLinux ALSA) and is noted in some entries as d...

CVE-2018-20532

CVE-2018-20532 describes a NULL pointer dereference in libsolv, specifically in ext/testcase.c (function testcase_read) of libsolv until version 0.7.2, which can lead to a denial of service. The connected advisories from MiracleLinux, Ubuntu USN-4851-1, Oracle Linux ELSA-2019-2290, and others ind...

CVE-2021-44568

CVE-2021-44568 describes two heap-overflow vulnerabilities in openSUSE/libsolv/libsolv that could allow an attacker to cause a remote Denial of Service via the decisionmap/resolve_dependencies path in libsolv. The connected IBM/Red Hat/NCSC/Nessus entries corroborate the issue and reference affec...

CVE-2018-20533

CVE-2018-20533 is a NULL pointer dereference vulnerability in libsolvext.a (libsolv) affecting libsolv up to version 0.7.2, specifically in ext/testcase.c (testcase_str2dep_complex). Exploitation context and affected packages are evidenced across multiple advisories and Nessus plugins (e.g., Orac...

CVE-2026-9149

The CVE-2026-9149 entry describes a heap buffer overflow in libsolv, triggered when processing a crafted .solv file that contains negative size values fed to the repo_add_solv function. This results in an undersized allocation followed by an out-of-bounds write, enabling a potential denial of ser...

CVE-2026-9150

Libsolv contains a stack-based buffer overflow in the Debian metadata parser when processing specially crafted Debian repository metadata. The vulnerability is triggered by malicious SHA384/SHA512 checksum tags, causing memory corruption and a denial of service. Affected component: libsolv’s Debi...