Denial Of Service (DoS)

2022-02-2207:54:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

JSON

libsolv.so is vulnerable to denial of service (DoS) attacks. A remote attacker is able to cause heap-based buffer overflow in resolve_weak function in src/solver.c resulting in a system crash.

CPENameOperatorVersion
libsolv.sole1
libsolv.sole1

CPE	Name	Operator	Version
	libsolv.so	le	1
	libsolv.so	le	1

References

github.com/openSUSE/libsolv/issues/426

github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/resolve_weak-2222

github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/resolve_weak-2249

lists.fedoraproject.org/archives/list/[email protected]/message/XVLRHB6CUX3SHYOIGVUQNWAOW5JYANWH/

JSON

Related for VERACODE:34342