libsolv 资源管理错误漏洞

漏洞信息详情

libsolv是一个用于检查软件包依赖的库。

openSUSE libsolv 存在安全漏洞，该漏洞源于 libsolv 中存在两个内存漏洞位于 src/solver.c 的 resolve_weak 函数。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/openSUSE/libsolv/issues/426

来源:MISC

链接:https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/resolve_weak-2222

来源:MISC

链接:https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/resolve_weak-2249

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/XVLRHB6CUX3SHYOIGVUQNWAOW5JYANWH/

来源:MISC

链接:https://github.com/openSUSE/libsolv/issues/426

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-44576

来源:cxsecurity.com

链接:https://cxsecurity.com/cveshow/CVE-2021-44576/

暂无