Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34360
HistoryFeb 23, 2022 - 8:47 a.m.

Heap-based Buffer Overflow

2022-02-2308:47:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

libsolv.so is vulnerable to heap-based buffer overflow. The vulnerability exists in prefer_suggested function in policy.c as it doesn’t properly handle the size of the map variables which causes an application crash.

CPENameOperatorVersion
libsolv.sole1
libsolv.sole1