SUSE update for libsolv



Published: 2021-06-23
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2019-20387
CVE-2021-3200
CWE-ID CWE-125
CWE-20
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		SUSE Linux Enterprise Server
Operating systems & Components / Operating system

python-solv-debuginfo
Operating systems & Components / Operating system package or component

python-solv
Operating systems & Components / Operating system package or component

perl-solv-debuginfo
Operating systems & Components / Operating system package or component

perl-solv
Operating systems & Components / Operating system package or component

libzypp-devel
Operating systems & Components / Operating system package or component

libzypp-debugsource
Operating systems & Components / Operating system package or component

libzypp-debuginfo
Operating systems & Components / Operating system package or component

libzypp
Operating systems & Components / Operating system package or component

libsolv-tools-debuginfo
Operating systems & Components / Operating system package or component

libsolv-tools
Operating systems & Components / Operating system package or component

libsolv-devel
Operating systems & Components / Operating system package or component

libsolv-debugsource
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU24490

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-20387

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read via a last schema whose length is less than the length of the input schema. A remote attacker can perform a denial of service attack.

Mitigation

Update the affected package libsolv to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server: 12-SP2-BCL

python-solv-debuginfo: before 0.6.37-2.27.24.1

python-solv: before 0.6.37-2.27.24.1

perl-solv-debuginfo: before 0.6.37-2.27.24.1

perl-solv: before 0.6.37-2.27.24.1

libzypp-devel: before 16.21.4-27.75.1

libzypp-debugsource: before 16.21.4-27.75.1

libzypp-debuginfo: before 16.21.4-27.75.1

libzypp: before 16.21.4-27.75.1

libsolv-tools-debuginfo: before 0.6.37-2.27.24.1

libsolv-tools: before 0.6.37-2.27.24.1

libsolv-devel: before 0.6.37-2.27.24.1

libsolv-debugsource: before 0.6.37-2.27.24.1

External links

http://www.suse.com/support/update/announcement/2021/suse-su-20212145-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper input validation

EUVDB-ID: #VU62515

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-3200

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the Signaling (libsolv) component in Oracle Communications Cloud Native Core Policy. A local non-authenticated attacker can exploit this vulnerability to perform service disruption.

Mitigation

Update the affected package libsolv to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server: 12-SP2-BCL

python-solv-debuginfo: before 0.6.37-2.27.24.1

python-solv: before 0.6.37-2.27.24.1

perl-solv-debuginfo: before 0.6.37-2.27.24.1

perl-solv: before 0.6.37-2.27.24.1

libzypp-devel: before 16.21.4-27.75.1

libzypp-debugsource: before 16.21.4-27.75.1

libzypp-debuginfo: before 16.21.4-27.75.1

libzypp: before 16.21.4-27.75.1

libsolv-tools-debuginfo: before 0.6.37-2.27.24.1

libsolv-tools: before 0.6.37-2.27.24.1

libsolv-devel: before 0.6.37-2.27.24.1

libsolv-debugsource: before 0.6.37-2.27.24.1

External links

http://www.suse.com/support/update/announcement/2021/suse-su-20212145-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###