libsolv 缓冲区错误漏洞

漏洞信息详情

libsolv是一个用于检查软件包依赖的库。

libsolv 存在缓冲区错误漏洞，该漏洞源于 libsolv 中存在两个堆溢出漏洞，src/solver.c 的传播函数中存在错误。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/openSUSE/libsolv/issues/428

来源:MISC

链接:https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/propagate-524

来源:MISC

链接:https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/propagate-490

来源:MISC

链接:https://github.com/openSUSE/libsolv/issues/428

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/XVLRHB6CUX3SHYOIGVUQNWAOW5JYANWH/

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-44577

来源:cxsecurity.com

链接:https://cxsecurity.com/cveshow/CVE-2021-44577/

暂无