libsolv 缓冲区错误漏洞

漏洞信息详情

libsolv是一个用于检查软件包依赖的库。

libsolv 存在缓冲区错误漏洞，该漏洞源于oenSUSE libsolv 中存在两个堆溢出漏洞，位于 src/solver.c 的 resolve_installed 函数中。

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页：

https://cxsecurity.com/cveshow/CVE-2021-44573/

来源:MISC

链接:https://github.com/openSUSE/libsolv/issues/430

来源:MISC

链接:https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/resolve_installed-1728

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/XVLRHB6CUX3SHYOIGVUQNWAOW5JYANWH/

来源:MISC

链接:https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/resolve_installed-1766

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-44573

来源:cxsecurity.com

链接:https://cxsecurity.com/cveshow/CVE-2021-44573/

暂无