Orta CVSS 6.5
CVE-2026-9149: Libsolv: yığın (heap) taşması
Açıklama (NVD)
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
Özet bilgiler
- Ürün
- Opensuse Libsolv
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %0,31 (yüzdelik 24)
- CWE
- CWE-122
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| opensuse-libsolv | — | 0.7.36 | — |
| redhat-hardened-images | — | — | — |
| redhat-openshift-container-platform | 4.0 | 4.0 | — |
| redhat-satellite | 6.0 | 6.0 | — |
| redhat-update-infrastructure | 4 | 4 | — |
| redhat-enterprise-linux | 7.0 | 7.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 10.0 | 10.0 | — |