CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
opensuselibsolv
𝑥
≤ 0.7.2
canonicalubuntu_linux
18.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libsolv
bullseye
0.7.17-1+deb11u1
fixed
bookworm
0.7.23-1+deb12u1
fixed
sid
0.7.30-2
fixed
trixie
0.7.30-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libsolv
lunar
Fixed 0.6.5-2ubuntu1
released
kinetic
Fixed 0.6.5-2ubuntu1
released
jammy
Fixed 0.6.5-2ubuntu1
released
impish
Fixed 0.6.5-2ubuntu1
released
hirsute
Fixed 0.6.5-2ubuntu1
released
groovy
Fixed 0.6.5-2ubuntu1
released
focal
Fixed 0.6.5-2ubuntu1
released
eoan
Fixed 0.6.5-2ubuntu1
released
disco
Fixed 0.6.5-2ubuntu1
released
cosmic
Fixed 0.6.35-2ubuntu0.18.10.1
released
bionic
Fixed 0.6.30-1ubuntu0.1~esm1
released
xenial
Fixed 0.6.11-1.1ubuntu0.1~esm1
released
trusty
dne