Buffer overflow vulnerability in function poolinstallablewhatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
A flaw was found in libsolv. A buffer overflow vulnerability in the prunetorecommend function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability.
A flaw was found in libsolv. A buffer overflow vulnerability in the pooldisabledsolvable function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability.
repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.
A vulnerability was found in libsolv through 0.7.2. There is an illegal address access at src/pool.h (function poolwhatprovides) in libsolv.a that will cause a denial of service.
References: https://bugzilla.redhat.com/showbug.cgi?id=1652604
Upstream Patch: https://github.com/openSUSE/libsolv/pull/291
A vulnerability was found in libsolv through 0.7.2. There is a NULL pointer dereference at ext/testcase.c (function testcasestr2depcomplex) in libsolvext.a in libsolv that will cause a denial of service.
References: https://bugzilla.redhat.com/showbug.cgi?id=1652599
Upstream Patch: https://github.com/openSUSE/libsolv/pull/291
A vulnerability was found in libsolv through 0.7.2. There is a NULL pointer dereference at ext/testcase.c (function testcaseread) in libsolvext.a that will cause a denial of service.
References: https://bugzilla.redhat.com/showbug.cgi?id=1652605
Upstream Patch: https://github.com/openSUSE/libsolv/pull/291