因此，该应用程序受到 ALAS2022-2022-167 公告中提及的漏洞的影响。

  - 采用 src/testcase.c:line 2334 的 Solver * testcase_read（Pool *pool、FILE *fp、const char *testcase、Queue *job、char **resultp、int *resultflagsp）函数的 libsolv 2020-12-13 中存在缓冲区溢出漏洞，可导致拒绝服务 (CVE-2021-3200)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Rocky Linux 8 主机上存在安装的程序包该程序包受到公告 RLSA-2021:4408 中提及的漏洞的影响。

  - libsolv 2020-12-13 通过 src/testcase.c 中的 Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp 函数)发现的缓冲区溢出漏洞第 2334 行可造成拒绝服务 (CVE-2021-3200)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the libsolv package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp,     const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334,     which could cause a denial of service (CVE-2021-3200)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-167 advisory.

    A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest     threat from this vulnerability is to system availability. (CVE-2021-3200)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp,     const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334,     which could cause a denial of service (CVE-2021-3200)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libsolv package has been released.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4408 advisory.

  - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp,     const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334,     which could cause a denial of service (CVE-2021-3200)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4408 advisory.

  - libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4408 advisory.

  - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp,     const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334,     which could cause a denial of service (CVE-2021-3200)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
166986	Amazon Linux 2022：(ALAS2022-2022-167)	Nessus	Amazon Linux Local Security Checks	2022/11/4	2024/12/11	low
184941	Rocky Linux 8libsolv (RLSA-2021:4408)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	low
154387	EulerOS 2.0 SP3 : libsolv (EulerOS-SA-2021-2593)	Nessus	Huawei Local Security Checks	2021/10/25	2023/11/28	low
153748	EulerOS 2.0 SP9 : libsolv (EulerOS-SA-2021-2557)	Nessus	Huawei Local Security Checks	2021/9/27	2023/11/29	low
166986	Amazon Linux 2022 : libsolv, libsolv-demo, libsolv-devel (ALAS2022-2022-167)	Nessus	Amazon Linux Local Security Checks	2022/11/4	2024/12/11	low
158018	EulerOS Virtualization 3.0.6.0 : libsolv (EulerOS-SA-2022-1077)	Nessus	Huawei Local Security Checks	2022/2/13	2023/11/9	low
150241	Photon OS 1.0: Libsolv PHSA-2021-1.0-0396	Nessus	PhotonOS Local Security Checks	2021/6/4	2023/12/27	low
150751	Photon OS 2.0: Libsolv PHSA-2021-2.0-0355	Nessus	PhotonOS Local Security Checks	2021/6/14	2024/7/22	low
157472	AlmaLinux 8 : libsolv (ALSA-2021:4408)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/13	low
155163	CentOS 8 : libsolv (CESA-2021:4408)	Nessus	CentOS Local Security Checks	2021/11/11	2023/11/24	low
184941	Rocky Linux 8 : libsolv (RLSA-2021:4408)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	low

检测

插件搜索

low

low

low

low

low

low

low

low

low

low

low