Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

CISA ADP · SSVC 2.0.3

Exploitation

None

Automatable

No

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 0.7.33-5.el10_2 Patch available CNA
• Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 0.7.29-8.el10_0.1 Patch available CNA
• Red Hat Hardened Images VendorRed Hat Affected — Fixed in 0.7.38-2.hum1 Patch available CNA
• Red Hat Hardened Images VendorRed Hat Affected — Fixed in 0.7.39-3.hum1 Patch available CNA
• Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
• Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Satellite 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Update Infrastructure 4 for Cloud Providers VendorRed Hat Affected — Fixed in — No fix listed CNA

Records fixed by the same vendor advisory or release, as the CNA lists them.

• Advisory · 2026-05-20

  Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 7 more products — RHSA-2026:21333

  3 records · Highest priority Priority MEDIUM · 1 MEDIUM, 2 LOW

  Other records, highest priority first

  • TI-2026-08044 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv filePriority MEDIUM 62
  • TI-2026-36128 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataPriority LOW 35
  Show all 3 records → Advisory →
• Advisory · 2026-05-20

  Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 7 more products — RHSA-2026:28236

  3 records · Highest priority Priority MEDIUM · 1 MEDIUM, 2 LOW

  Other records, highest priority first

  • TI-2026-08044 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv filePriority MEDIUM 62
  • TI-2026-36128 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataPriority LOW 35
  Show all 3 records → Advisory →

1. 2026-10-02 Threatist record created from CVE-2026-9150
2. 2026-10-03 Alias added: GHSA-p4w9-3pj8-mhq7
3. 2026-10-16 Affected versions changed · Red Hat
4. 2026-11-06 Affected versions changed · Red Hat

• TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
• TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
• TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
• TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
• TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
• TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0

• CVE-2026-9150 · CVE Program
• CVE-2026-9150 · NVD
• FIRST EPSS
• GHSA-p4w9-3pj8-mhq7 · GitHub Advisory Database · CC BY 4.0
• CVE-2026-9150 · Red Hat security data · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences