REDHAT-BUG-1665535: Null Pointer Dereference
A vulnerability was found in libsolv through 0.7.2. There is a NULL pointer dereference at ext/testcase.c (function testcasestr2depcomplex) in libsolvext.a in libsolv that will cause a denial of service.
References: https://bugzilla.redhat.com/showbug.cgi?id=1652599
Upstream Patch: https://github.com/openSUSE/libsolv/pull/291
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1665535?
The severity of REDHAT-BUG-1665535 is classified as a denial of service due to a NULL pointer dereference.
How do I fix REDHAT-BUG-1665535?
To fix REDHAT-BUG-1665535, update libsolv to a version later than 0.7.2.
Which software is affected by REDHAT-BUG-1665535?
The affected software for REDHAT-BUG-1665535 is openSUSE libsolv version 0.7.2 and earlier.
What causes the issue in REDHAT-BUG-1665535?
The issue in REDHAT-BUG-1665535 is caused by a NULL pointer dereference in the function testcase_str2dep_complex.
Is there a workaround for REDHAT-BUG-1665535?
Currently, there are no documented workarounds for REDHAT-BUG-1665535 other than upgrading to a patched version.