https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:59:23 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4408 <p><strong>Affected:</strong> AlmaLinux:8: libsolv-devel, AlmaLinux:8: libsolv-tools</p> <p>The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.</p> <p>Security Fix(es):</p> <p>* libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libsolv-devel, AlmaLinux:8: libsolv-tools</p> <p>The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.</p> <p>Security Fix(es):</p> <p>* libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4408 https://cve.radiocsirt.org/vuln/bdu:2021-04684 bdu:2021-04684 https://cve.radiocsirt.org/vuln/bdu:2021-04684 https://cve.radiocsirt.org/vuln/certfr-2022-avi-386 certfr-2022-avi-386 https://cve.radiocsirt.org/vuln/certfr-2022-avi-386 https://cve.radiocsirt.org/vuln/euvd-2026-20745 EUVD-2026-20745 https://cve.radiocsirt.org/vuln/euvd-2026-20745 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3200 <p>Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service</p> <p>Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3200 https://cve.radiocsirt.org/vuln/ghsa-cphx-qv3m-4vvc <p>Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service</p> <p>Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service</p> https://cve.radiocsirt.org/vuln/ghsa-cphx-qv3m-4vvc https://cve.radiocsirt.org/vuln/gsd-2021-3200 gsd-2021-3200 https://cve.radiocsirt.org/vuln/gsd-2021-3200 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3200 msrc_CVE-2021-3200 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3200 https://cve.radiocsirt.org/vuln/oesa-2021-1209 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libsolv</p> <p>A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies. Security Fix(es): Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service(CVE-2021-3200)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libsolv</p> <p>A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package dependencies. Security Fix(es): Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service(CVE-2021-3200)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1209 https://cve.radiocsirt.org/vuln/rhsa-2021:4408 <p>libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c</p> <p>libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4408 https://cve.radiocsirt.org/vuln/rhsa-2022:5498 <p>libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c foreman: Authenticate remote code execution through Sendmail configuration Satellite: Allow unintended SCA certificate to authenticate Candlepin netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header sidekiq: XSS via the queue name of the live-poll feature python-sqlparse: ReDoS via regular expression in StripComments filter libsolv: heap-based buffer overflow in pool_installable() in src/repo.h libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c rubygem-puma: Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) in puma logback: remote code execution through JNDI call from within its configuration file netty: control chars in header names may lead to HTTP request smuggling python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through django: potential bypass of an upstream access control based on URL paths libsolv: heap-overflows in resolve_dependencies function django: Denial-of-service possibility in UserAttributeSimilarityValidator django: Potential information disclosure in dictsort template filter django: Potential directory-traversal via Stor…</p> <p>libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c foreman: Authenticate remote code execution through Sendmail configuration Satellite: Allow unintended SCA certificate to authenticate Candlepin netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header sidekiq: XSS via the queue name of the live-poll feature python-sqlparse: ReDoS via regular expression in StripComments filter libsolv: heap-based buffer overflow in pool_installable() in src/repo.h libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c rubygem-puma: Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) in puma logback: remote code execution through JNDI call from within its configuration file netty: control chars in header names may lead to HTTP request smuggling python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through django: potential bypass of an upstream access control based on URL paths libsolv: heap-overflows in resolve_dependencies function django: Denial-of-service possibility in UserAttributeSimilarityValidator django: Potential information disclosure in dictsort template filter django: Potential directory-traversal via Stor…</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5498 https://cve.radiocsirt.org/vuln/suse-su-2021:2145-1 <p>Security update for libsolv</p> <p>Security update for libsolv</p> https://cve.radiocsirt.org/vuln/suse-su-2021:2145-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3200 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsolv, Ubuntu:Pro:18.04:LTS: libsolv, Ubuntu:20.04:LTS: libsolv</p> <p>Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsolv, Ubuntu:Pro:18.04:LTS: libsolv, Ubuntu:20.04:LTS: libsolv</p> <p>Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3200 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0571 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0571