Denial Of Service (DoS)

2022-02-2207:34:01

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

JSON

libsolv.so is vulnerable to denial of service(DoS) attacks. A remote attacker is able to cause heap-based buffer overflow in makeruledecisions function in src/solver.c resulting in a system crash.

CPENameOperatorVersion
libsolv.sole1
libsolv.sole1

CPE	Name	Operator	Version
	libsolv.so	le	1
	libsolv.so	le	1

References

github.com/openSUSE/libsolv/issues/427

github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/makeruledecisions-307

github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/makeruledecisions_147

lists.fedoraproject.org/archives/list/[email protected]/message/XVLRHB6CUX3SHYOIGVUQNWAOW5JYANWH/

JSON

Related for VERACODE:34341