Buffer Overflow Vulnerability in libsolv by openSUSE
CVE-2021-3200

3.3LOW

Key Information:

Vendor

Opensuse
Status
Libsolv
Vendor
CVE Published:
18 May 2021

What is CVE-2021-3200?

A buffer overflow vulnerability exists in the libsolv library, specifically in the Solver's testcase_read function located in src/testcase.c at line 2334. This flaw arises from improper handling of input within the function, which can potentially lead to a denial of service. Attackers could exploit this vulnerability to cause unexpected behavior or crashes by providing crafted input to the affected function.

References

https://github.com/openSUSE/libsolv/issues/416
x_refsource_MISC
https://github.com/yangjiageng/PoC/blob/master/libsolv-Po...
x_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2022.html
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.