CVE-2021-33928: Buffer Overflow
Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libsolvto a version that resolves this vulnerability.Fixed in 0.7.17 - Upgrade
Upgrade
libsolvto a version that resolves this vulnerability.Fixed in 0.7.17
Event History
Frequently Asked Questions
What is CVE-2021-33928?
CVE-2021-33928 is a vulnerability in Libsolv that could be exploited by a remote attacker to cause a denial of service.
How severe is CVE-2021-33928?
CVE-2021-33928 has a severity value of 5.3, which is considered medium.
Which software is affected by CVE-2021-33928?
CVE-2021-33928 affects the following software: Libsolv 0.7.17, IBM QRadar SIEM 7.5.0 GA, IBM QRadar SIEM 7.4.3 GA - 7.4.3 FP4, and IBM QRadar SIEM 7.3.3 GA - 7.3.3 FP10.
How can I fix CVE-2021-33928 in Libsolv 0.7.17?
To fix CVE-2021-33928 in Libsolv 0.7.17, you should update to a version that includes the patch provided by the vendor.
How can I fix CVE-2021-33928 in IBM QRadar SIEM?
To fix CVE-2021-33928 in IBM QRadar SIEM, you should apply the relevant patch provided by IBM.