Vulnerability Details : CVE-2018-20534
Potential exploit
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
Vulnerability category: Denial of service
Products affected by CVE-2018-20534
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
- cpe:2.3:a:opensuse:libsolv:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-20534
0.34%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 53 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-20534
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2018-20534
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-20534
-
https://bugzilla.redhat.com/show_bug.cgi?id=1652604
1652604 – There is an illegal address access at src/pool.h:331 pool_whatprovides in libsolv.Exploit;Issue Tracking;Third Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html
[security-announce] openSUSE-SU-2019:1927-1: moderate: Security update f
-
https://access.redhat.com/errata/RHSA-2019:3583
RHSA-2019:3583 - Security Advisory - Red Hat Customer Portal
-
https://access.redhat.com/errata/RHSA-2019:2290
RHSA-2019:2290 - Security Advisory - Red Hat Customer Portal
-
https://usn.ubuntu.com/3916-1/
USN-3916-1: libsolv vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://github.com/openSUSE/libsolv/pull/291
Fix: memory leaks, memory access, non used values by jrohel · Pull Request #291 · openSUSE/libsolv · GitHubPatch;Third Party Advisory
-
https://bugzilla.suse.com/show_bug.cgi?id=1120631
Bug 1120631 – VUL-1: CVE-2018-20534: libsolv: illegal address access at src/pool.h (function pool_whatprovides) in libsolv.aIssue Tracking;Third Party Advisory
Jump to