Bug 1962307 (CVE-2021-3200) - CVE-2021-3200 libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c
Summary: CVE-2021-3200 libsolv: heap-based buffer overflow in testcase_read() in src/t...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2021-3200
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1973712 1962308 1966716 1968516
Blocks: 1962309
TreeView+ depends on / blocked
 
Reported: 2021-05-19 17:41 UTC by Guilherme de Almeida Suckevicz
Modified: 2022-07-05 14:26 UTC (History)
38 users (show)

Fixed In Version: libsolv 0.7.17
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability.
Clone Of:
Environment:
Last Closed: 2021-11-02 23:32:12 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2021:4408 0 None None None 2021-11-09 18:40:21 UTC
Red Hat Product Errata RHSA-2022:5498 0 None None None 2022-07-05 14:26:34 UTC

Description Guilherme de Almeida Suckevicz 2021-05-19 17:41:36 UTC 
Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service

Reference:
https://github.com/openSUSE/libsolv/issues/416
Comment 1 Guilherme de Almeida Suckevicz 2021-05-19 17:42:22 UTC 
Created libsolv tracking bugs for this issue:

Affects: fedora-all [bug 1962308]
Comment 2 Yadnyawalk Tale 2021-05-24 18:01:41 UTC 
Upstream fix:
https://github.com/openSUSE/libsolv/commit/0077ef29eb46d2e1df2f230fc95a1d9748d49dec
Comment 6 Tapas Jena 2021-06-18 14:22:26 UTC 
Analysis is complete for Ansible Automation Platform and it was found that the vulnerable library is being used by Pulp Core component of AAP 1.2 as shown below:
manifest.txt:ansible_automation_platform:1.2::el7/libsolv-0.7.12-2.el7pc
manifest.txt:ansible_automation_platform:1.2::el8/libsolv-0:0.7.12-2.el8pc

However, this is an indirect dependency which gets pulled up in all the stacks while installing Automation Hub. That means, Pulp core is just relying on a package which rely on libsolv Lib. Hence, the ansible component i.e. pulp core is not directly impacted by this vulnerability. Moreover, as the vulnerable function i.e. testcase_read() is being used in in Test systems only, not anywhere in Production environment. Hence, changing the severity to "Low" for Ansible.
Comment 10 errata-xmlrpc 2021-11-09 18:40:18 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2021:4408 https://access.redhat.com/errata/RHSA-2021:4408
Comment 11 errata-xmlrpc 2022-07-05 14:26:31 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.11 for RHEL 7
  Red Hat Satellite 6.11 for RHEL 8

Via RHSA-2022:5498 https://access.redhat.com/errata/RHSA-2022:5498
Note You need to log in before you can comment on or make changes to this bug.