CVE-2026-9150

Katalog CVE

CVSS 6.5 · Medium EPSS 0,58%

Kerentanan Stack-based Buffer Overflow pada opensuse libsolv, redhat hardened images +4 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.

Rincian

Terbit di NVD

20 Mei 2026

Terakhir diubah

1 September 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 46,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openSUSE/libsolv/pull/616 issue tracking · patch
• https://access.redhat.com/security/cve/CVE-2026-9150 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2460379 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2026:21333
• https://access.redhat.com/errata/RHSA-2026:28236
• https://access.redhat.com/errata/RHSA-2026:30649
• https://access.redhat.com/errata/RHSA-2026:48818