CVE-2026-48864

opensuse libsolv, redhat hardened images, redhat openshift container platform +3 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-48864

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Out-of-bounds Write pada opensuse libsolv, redhat hardened images +4 lainnya. Skor CVSS 3.1 7.8 (High) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

Rincian

Terbit di NVD
26 Mei 2026
Terakhir diubah
14 Oktober 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,26% peluang dieksploitasi; lebih tinggi dari 16,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
opensuse libsolv Versi 0.7.36
redhat hardened images Semua versi
redhat openshift container platform Versi 4.0
redhat satellite Versi 6.0
redhat update infrastructure Versi 4
redhat enterprise linux Versi 7.0
redhat enterprise linux Versi 8.0
redhat enterprise linux Versi 9.0
redhat enterprise linux Versi 10.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 14 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.