Approved changes feed: RSS · Atom
cpe:2.3:a:opensuse:libsolv:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opensuse (3380e48e-e718-5685-8ad0-092ef58910e5) |
|---|---|
| Product | Libsolv (3417cf42-7678-5f9d-8c42-1cf51054e57b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libsolv |
purl2cpe | 2026-06-01 10:15:36.386794 |
pkg:deb/ubuntu/libsolv |
purl2cpe | 2026-06-01 10:15:36.386796 |
pkg:github/opensuse/libsolv |
purl2cpe | 2026-06-01 10:15:36.386797 |
pkg:rpm/centos/libsolv |
purl2cpe | 2026-06-01 10:15:36.386799 |
pkg:rpm/fedora/libsolv |
purl2cpe | 2026-06-01 10:15:36.386800 |
pkg:rpm/opensuse/libsolv |
purl2cpe | 2026-06-01 10:15:36.386801 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48863 |
vulnerable | 2026-07-29 00:55:01.708598 |
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
HIGH (7.5)
A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could lead to a denial of service in automated package or repository processing workflows.
Published: 2026-07-16T00:46:12.846Z
Updated: 2026-07-18T02:39:45.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44568 |
vulnerable | 2026-06-08 05:36:46.355508 |
Details available
Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.
Published: 2022-02-21T17:38:57.000Z
Updated: 2024-08-04T04:25:16.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3200 |
vulnerable | 2026-06-08 05:33:51.025124 |
Details available
Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
Published: 2021-05-18T16:14:25.000Z
Updated: 2024-08-03T16:45:51.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33938 |
vulnerable | 2026-06-08 05:32:12.718111 |
Details available
Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
Published: 2021-09-02T14:58:15.000Z
Updated: 2024-08-04T00:05:51.057Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33930 |
vulnerable | 2026-06-08 05:32:12.717731 |
Details available
Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
Published: 2021-09-02T14:58:13.000Z
Updated: 2024-08-04T00:05:52.463Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33929 |
vulnerable | 2026-06-08 05:32:12.717424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33928 |
vulnerable | 2026-06-08 05:32:12.717010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20387 |
vulnerable | 2026-06-08 05:13:40.527480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20534 |
vulnerable | 2026-06-08 05:11:27.506101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20533 |
vulnerable | 2026-06-08 05:11:27.505340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20532 |
vulnerable | 2026-06-08 05:11:27.504856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.