Related Vulnerabilities: CVE-2021-44577  

Two heap-overflow vulnerabilities exist in openSUSE libsolv through 13 Dec 2020 bugs in the propagate function at src/solver.c: line 490 and 524.

Description

The MITRE CVE dictionary describes this issue as:

Two heap-overflow vulnerabilities exist in openSUSE libsolv through 13 Dec 2020 bugs in the propagate function at src/solver.c: line 490 and 524.

Additional Information

  • Bugzilla 2056783: CVE-2021-44577 libsolv: Heap overflow
  • CWE-787: Out-of-bounds Write
  • FAQ: Frequently asked questions about CVE-2021-44577