Dinko Georgiev

**Name of the Vulnerable Software and Affected Versions** libsolv (affected versions not specified) **Description** An issue exists in libsolv, a dependency-resolution library utilized by RPM-based package managers like dnf and zypper for handling .solv repository cache files. The library fails to validate that directory-id values read from the compressed filelist data fall within the expected range during the rewriting of a .solv cache file. A corrupted or specially crafted .solv cache file, such as one resulting from an unclean system shutdown, can trigger an out-of-bounds memory write within the `repo write()` function when processed by tools such as dnf, yum, or zypper. This typically results in a denial of service via a tool crash, as the write operation uses a fixed value not controlled by an attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.