PT-2022-12166 · Opensuse · Libsolv

Published 2022-02-21 · Updated 2022-06-13 · CVE-2021-44570

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions opensSUSE/libsolv versions prior to 13 Dec 2020

Description Two heap-overflow issues exist in the solver get recommendations function at src/solver.c, specifically at lines 4286 and 4305, related to FOR PROVIDES.

Recommendations For versions prior to 13 Dec 2020, as a temporary workaround, consider disabling the solver get recommendations function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-44570

Affected Products

Libsolv

References · 10

• 🔥 https://github.com/openSUSE/libsolv/issues/424 · Exploit
• 🔥 https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/solver_get_recommendations-4286 · Exploit
• 🔥 https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/solver_get_recommendations-4305 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44570 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-44570 · Security Note
• https://ubuntu.com/security/CVE-2021-44570 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-44570 · Vendor Advisory
• https://github.com/openSUSE/libsolv/commit/0077ef29eb46d2e1df2f230fc95a1d9748d49dec · Note
• https://t.me/cvenotify/27537 · Telegram Post
• https://t.me/cvenotify/27145 · Telegram Post