Related Vulnerabilities: CVE-2021-44576  

Two memory vulnerabilities exists in openSUSE libsolv through 13 Dec 2020 in the resolve_weak function at src/solver.c: line 2222 and 2249.

Description

The MITRE CVE dictionary describes this issue as:

Two memory vulnerabilities exists in openSUSE libsolv through 13 Dec 2020 in the resolve_weak function at src/solver.c: line 2222 and 2249.

Additional Information

  • Bugzilla 2056782: CVE-2021-44576 libsolv: Heap overflow
  • CWE-787: Out-of-bounds Write
  • FAQ: Frequently asked questions about CVE-2021-44576