7.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се локално, без особени условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux 10: 0:0.7.33-5.el10_2 преди *
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:0.7.29-8.el10_0.1 преди *
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 0:0.6.34-4.el7_9.1 преди *
- Red Hat Red Hat Enterprise Linux 8: 0:0.7.20-7.el8_10 преди *
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:0.7.16-3.el8_4.1 преди *
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:0.7.16-3.el8_4.1 преди *
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:0.7.20-1.el8_6.1 преди *
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:0.7.20-1.el8_6.1 преди *
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:0.7.20-4.el8_8.1 преди *
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:0.7.20-4.el8_8.1 преди *
- Red Hat Red Hat Enterprise Linux 9: 0:0.7.24-6.el9_8 преди *
- Red Hat Red Hat Enterprise Linux 9: 0:0.7.24-6.el9_8 преди *
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:0.7.22-4.el9_2.1 преди *
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:0.7.24-2.el9_4.1 преди *
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:0.7.24-3.el9_6.1 преди *
- Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202608241157-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.13: 413.92.202609080414-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.14: 414.92.202608172040-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.15: 415.92.202608180329-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.16: 416.94.202608150307-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.17: 417.94.202608250221-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.18: 418.94.202608142238-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.19: 4.19.9.6.202608182320-0 преди *
- Red Hat Red Hat Satellite 6.16 for RHEL 8: 1:0.7.20-7.el8sat преди *
- Red Hat Red Hat Satellite 6.16 for RHEL 8: 1:0.7.20-7.el8sat преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791371080 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791371069 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791788287 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791378395 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791970484 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459707 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459711 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459759 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1789029076 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791966259 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790223279 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790223719 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790272426 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790589998 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790589912 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790589914 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790589855 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790598593 преди *
- Red Hat Red Hat Discovery 2: 1784821670 преди *
- Red Hat Red Hat Discovery 2: 1784821750 преди *
- Red Hat Red Hat Hardened Images: 0.7.38-2.hum1 преди *
- Red Hat Red Hat Insights proxy 1.5: 1786433656 преди *
- Red Hat Red Hat OpenShift AI 3.0: 1790276886 преди *
- Red Hat Red Hat OpenShift AI 3.0: 1790276884 преди *
- Red Hat Red Hat OpenShift AI 3.0: 1790277045 преди *
- Red Hat Red Hat OpenShift AI 3.0: 1790276889 преди *
- Red Hat Red Hat OpenShift AI 3.0: 1790276974 преди *
- Red Hat Red Hat OpenShift AI 3.2: 1790703497 преди *
- Red Hat Red Hat OpenShift AI 3.2: 1790703506 преди *
- Red Hat Red Hat OpenShift AI 3.2: 1790703590 преди *
- Red Hat Red Hat OpenShift AI 3.2: 1790703568 преди *
- Red Hat Red Hat OpenShift AI 3.2: 1790703586 преди *
- Red Hat Red Hat OpenShift AI 3.2: 1790703494 преди *
- Red Hat Red Hat OpenShift AI 3.4: 1790703542 преди *
- Red Hat Red Hat Update Infrastructure 5: 1784794818 преди *
- Red Hat Red Hat Update Infrastructure 5: 1784794778 преди *
- Red Hat Red Hat Update Infrastructure 5: 1784795112 преди *
- Red Hat Red Hat Update Infrastructure 5: 1784794289 преди *
- Red Hat Red Hat Update Infrastructure 5: 1784795076 преди *
- Red Hat Red Hat Update Infrastructure 5: 1787241211 преди *
- Red Hat Red Hat Update Infrastructure 5: 1787135742 преди *
- Red Hat Red Hat Update Infrastructure 5: 1787241260 преди *
- Red Hat Red Hat Update Infrastructure 4 for Cloud Providers
Вид слабост
История
- 26 май 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux 10
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-48864
- https://nvd.nist.gov/vuln/detail/CVE-2026-48864
- https://access.redhat.com/errata/RHSA-2026:21333
- https://access.redhat.com/errata/RHSA-2026:28236
- https://access.redhat.com/errata/RHSA-2026:36730
- https://access.redhat.com/errata/RHSA-2026:39315
- https://access.redhat.com/errata/RHSA-2026:44481
- https://access.redhat.com/errata/RHSA-2026:46836
- https://access.redhat.com/errata/RHSA-2026:48811
- https://access.redhat.com/errata/RHSA-2026:48813
- https://access.redhat.com/errata/RHSA-2026:48814
- https://access.redhat.com/errata/RHSA-2026:48815
- https://access.redhat.com/errata/RHSA-2026:48816
- https://access.redhat.com/errata/RHSA-2026:48817
- https://access.redhat.com/errata/RHSA-2026:48818
- https://access.redhat.com/errata/RHSA-2026:49775
- https://access.redhat.com/errata/RHSA-2026:50223
- https://access.redhat.com/errata/RHSA-2026:53371
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:56911
- https://access.redhat.com/errata/RHSA-2026:57402
- https://access.redhat.com/errata/RHSA-2026:57483
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:59831
- https://access.redhat.com/errata/RHSA-2026:60019
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82336
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-48864
- https://bugzilla.redhat.com/show_bug.cgi?id=2460425