Overview 10 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
10matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
10
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
10
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
10
100.0%
split by
peak 4 / quarter
Q4 183
Not applicable3
Medium3
not blocked3
No public exploit3
Q1 190
Q2 190
Q3 190
Q4 190
Q1 201
Not applicable1
High1
not blocked1
No public exploit1
Q2 200
Q3 200
Q4 200
Q1 210
Q2 211
Not applicable1
Low1
not blocked1
No public exploit1
Q3 214
Not applicable4
High4
not blocked4
No public exploit4
Q4 210
Q1 221
Not applicable1
Medium1
not blocked1
No public exploit1
Q1 19Q3 19Q1 20Q3 20Q1 21Q3 21Q1 22
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2021-44568 | Medium | 2022-02-21 | Not applicable | No public exploit | Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service. |
| CVE-2021-33938 | High | 2021-09-02 | Not applicable | No public exploit | Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
| CVE-2021-33930 | High | 2021-09-02 | Not applicable | No public exploit | Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
| CVE-2021-33929 | High | 2021-09-02 | Not applicable | No public exploit | Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
| CVE-2021-33928 | High | 2021-09-02 | Not applicable | No public exploit | Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
| CVE-2021-3200 | Low | 2021-05-18 | Not applicable | No public exploit | Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service |
| CVE-2019-20387 | High | 2020-01-21 | Not applicable | No public exploit | repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema. |
| CVE-2018-20534 | Medium | 2018-12-28 | Not applicable | No public exploit | There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application |
| CVE-2018-20533 | Medium | 2018-12-28 | Not applicable | No public exploit | There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. |
| CVE-2018-20532 | Medium | 2018-12-28 | Not applicable | No public exploit | There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. |