OpenSUSE libsolv Schwachstellen (CVE)

Für OpenSUSE libsolv veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

4 Ergebnisse

7.5Hoch

CVE-2026-48863 vor 3 Monaten

Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

OpenSUSE libsolv; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature …

7.8Hoch

CVE-2026-48864 vor 5 Monaten

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when proc…

6.5Mittel

CVE-2026-9149 vor 5 Monaten

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Hardened Images; Red Hat Red Hat Enterprise Linux 7

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequen…

6.5Mittel

CVE-2026-9150 vor 5 Monaten

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Hardened Images; Red Hat Red Hat Enterprise Linux 7

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksu…