NULL pointer dereference in libsolv - CVE-2018-20532
Published: February 15, 2019
Vulnerability identifier: #VU17719
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-20532
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input processed by the testcase_read function, as defined in the ext/testcase.c source code file of the affected software. A remote attacker can trick the victim into opening or executing a file that submits malicious input, trigger a NULL pointer dereference condition and cause the affected software to crash, resulting in a DoS condition.
Affected software
libsolv
libsolv (Ubuntu package)
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Opensuse
Session Smart Router
libsolv (Ubuntu package)
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Opensuse
Session Smart Router
How to mitigate CVE-2018-20532
Install update from vendor's website.
libsolv (Ubuntu package) - update to 0.6.35-2ubuntu0.18.10.1
Session Smart Router - addressed in versions 5.4.7, 5.5.3
Session Smart Router - addressed in versions 5.4.7, 5.5.3