CVE-2021-44568

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 13 Dec 2020

Description The issue is related to two heap-overflow vulnerabilities in the decisionmap variable via the resolve dependencies function at src/solver.c (line 1940 and line 1995), which could cause a remote Denial of Service. This vulnerability is associated with a buffer overflow in memory, allowing a remote attacker to cause a service disruption.

Recommendations For versions prior to 13 Dec 2020, as a temporary workaround, consider disabling the resolve dependencies function until a patch is available. Restrict access to the decisionmap variable to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.