Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 13

Export CSV
CVE-2026-48864

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Cert Manager Discovery and 20 more
CVE-2026-9150

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse Red Hat Redhat
Products
Libsolv Red Hat Satellite 6 Enterprise Linux and 10 more
CVE-2026-9149

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse Red Hat Redhat
Products
Libsolv Red Hat Satellite 6 Enterprise Linux and 11 more
CVE-2021-44568

libsolv: heap-overflows in resolve_dependencies function

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Satellite Satellite Capsule
CVE-2021-3200

libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c

Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service

CVSS 3.1 · 3.3 Low EPSS 1.3% KEV · Not listed
Vendors
Opensuse Oracle Redhat
Products
Libsolv Communications Cloud Native Core Policy Enterprise Linux and 2 more
CVE-2021-33938

libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c

Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33930

libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h

Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33929

libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2021-33928

libsolv: heap-based buffer overflow in pool_installable() in src/repo.h

Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Opensuse Redhat
Products
Libsolv Enterprise Linux Satellite and 1 more
CVE-2019-20387

libsolv: out-of-bounds read in repodata_schema2id in repodata.c

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Opensuse Redhat
Products
Debian Linux Libsolv Enterprise Linux
CVE-2018-20534

libsolv: illegal address access in pool_whatprovides in src/pool.h

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Opensuse Redhat
Products
Ubuntu Linux Libsolv Enterprise Linux
CVE-2018-20533

libsolv: NULL pointer dereference in function testcase_str2dep_complex

There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Opensuse Redhat
Products
Ubuntu Linux Libsolv Enterprise Linux