Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-20534 →

DEBIAN-CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties di...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libsolv

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-1"}]}]

Debian:13 libsolv

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-1"}]}]

Debian:14 libsolv

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.36-1"}]}]

Références

advisory security-tracker.debian.org