Out-of-bounds write in libsolv - CVE-2021-33928

Vulnerability identifier: #VU66433

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-33928

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when processing untrusted input within the pool_installable() function in src/repo.h. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and crash the application.

libsolv
Service Telemetry Framework
IBM Cloud Pak for Business Automation
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Business Automation Insights
libsolv
python3-solv
libsolv (Red Hat package)
Red Hat OpenShift Serverless

Install updates from vendor's website.

libsolv - update to 0.7.17
Business Automation Insights - addressed in versions 24.0.0.0.5, 24.0.1.0.5, 25.0.0.0.2
IBM Cloud Pak for Business Automation - addressed in versions 24.0.1-IF006, 25.0.0-IF003
libsolv - update to 0.7.16-3
python3-solv - update to 0.7.16-3
libsolv (Red Hat package) - update to 0.7.16-3.el8_4
Red Hat OpenShift Serverless - update to 1.19.0
Red Hat Advanced Cluster Management for Kubernetes - update to 2.2.10

• https://github.com/openSUSE/libsolv/issues/417

• Multiple vulnerabilities in libsolv
• Multiple vulnerabilities in Red Hat Service Telemetry Framework
• Red Hat Enterprise Linux 8 update for libsolv
• Multiple vulnerabilities in Red Hat OpenShift Serverless 1.19
• Anolis OS update for libsolv
• Multiple vulnerabilities in IBM Business Automation Insights
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.2