Описание
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing negative size values in the repo_add_solv function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
Отчет
This Moderate impact heap buffer overflow in libsolv occurs when processing specially crafted .solv files with negative size values. Exploitation requires a victim to process attacker-controlled input, such as an untrusted .solv file, which can lead to a denial of service. The vulnerability is not easily exploitable without user interaction or specific application workflows that handle untrusted solvdb inputs.
Меры по смягчению последствий
To mitigate this issue, avoid processing untrusted .solv files with libsolv or any applications that consume .solv input. Ensure that all .solv data processed by the system originates from trusted sources only.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | libsolv | Fix deferred | ||
| Red Hat Enterprise Linux 8 | libsolv | Fix deferred | ||
| Red Hat Enterprise Linux 9 | libsolv | Fix deferred | ||
| Red Hat OpenShift Container Platform 4 | rhcos | Fix deferred | ||
| Red Hat Satellite 6 | satellite-capsule:el8/libsolv | Fix deferred | ||
| Red Hat Update Infrastructure 4 for Cloud Providers | libsolv | Fix deferred | ||
| Red Hat Enterprise Linux 10 | libsolv | Fixed | RHSA-2026:28236 | 23.06.2026 |
| Red Hat Hardened Images | libsolv-main-0.7.38-2.hum1 | Fixed | RHSA-2026:21333 | 27.05.2026 |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
A flaw was found in libsolv. This heap buffer overflow vulnerability o ...
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
6.5 Medium
CVSS3