Every CVE Search/ Get API key

CVE-2019-20387

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a...

7.5 HighFix available

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.34%Up 1.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
CVE-2019-20387
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
CVE-2019-20387
Updated
2026-11-02
EUVDEUVD-2019-10939 No score

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
EUVD-2019-10939
Updated
2026-11-03
GitHub AdvisoriesGHSA-vvx2-pj87-xmpx 7.5

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a...

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
GHSA-vvx2-pj87-xmpx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 7.5

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
CVE-2019-20387
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-20387 7.5

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
DEBIAN-CVE-2019-20387
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2020:4508 7.5

Red Hat Security Advisory: libsolv security, bug fix, and enhancement update

Record
RHSA-2020:4508
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-20387 7.5

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Record
UBUNTU-CVE-2019-20387
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2020-0117 No score

Updated libsolv packages fix security vulnerability

Updated libsolv packages fix security vulnerability:

An out-of-bounds read was discovered in libsolv when the last schema has a length that is less than the length of the input schema. A remote attacker may abuse this flaw to crash an application that uses libsolv (CVE-2019-20387).

Record
MGASA-2020-0117
Updated
2026-11-02
OSVSUSE-SU-2021:2145-1 No score

Security update for libsolv

This update for libsolv fixes the following issues:

Security issues fixed:

  • CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id (bsc#1161510)
  • CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late (bsc#1186229)

Other issues fixed:

  • backport support for blacklisted packages to support ptf packages and retracted patches
  • fix ruleinfo of complex dependencies returning the wrong origin
  • fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
  • fix add_complex_recommends() selecting conflicted packages in rare cases
  • fix potential segfault in resolve_jobrules
  • fix solv_zchunk decoding error if large chunks are used
Record
SUSE-SU-2021:2145-1
Updated
2026-11-02
OSVSUSE-SU-2021:2180-1 No score

Security update for libsolv

This update for libsolv fixes the following issues:

Security issues fixed:

  • CVE-2019-20387: Fixed heap-buffer-overflow in repodata_schema2id (bsc#1161510)
  • CVE-2021-3200: testcase_read: error out if repos are added or the system is changed too late (bsc#1186229)

Other issues fixed:

  • backport support for blacklisted packages to support ptf packages and retracted patches
  • fix ruleinfo of complex dependencies returning the wrong origin
  • fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
  • fix add_complex_recommends() selecting conflicted packages in rare cases
  • fix potential segfault in resolve_jobrules
  • fix solv_zchunk decoding error if large chunks are used
Record
SUSE-SU-2021:2180-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libsolv
Debian:12
 before 0.6.36-2
0.6.36-2
libsolv
Debian:13
 before 0.6.36-2
0.6.36-2
libsolv
Debian:14
 before 0.6.36-2
0.6.36-2
libsolv
Debian:8
 before 0.6.5-1+deb8u1, plus listed versions
0.6.5-1
0.6.5-1+deb8u1
libsolv
Mageia:7
 before 0.7.4-1.1.mga7
0.7.4-1.1.mga7
libsolv
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
libsolv-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
libsolv-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
libsolv-demo-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
libsolv-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
Show 34 moreShow less
Affected packages
PackageAffectedFixed
perl-solv-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
python3-solv
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
python3-solv-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
ruby-solv-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.7.11-1.el8
0:0.7.11-1.el8
libsolv
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 0.6.37-2.27.24.1
0.6.37-2.27.24.1
libzypp
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 16.21.4-27.75.1
16.21.4-27.75.1
libsolv
SUSE:HPE Helion OpenStack 8
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:HPE Helion OpenStack 8
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:OpenStack Cloud 8
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:OpenStack Cloud 8
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:OpenStack Cloud 9
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:OpenStack Cloud 9
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:OpenStack Cloud Crowbar 8
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:OpenStack Cloud Crowbar 8
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:OpenStack Cloud Crowbar 9
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:OpenStack Cloud Crowbar 9
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server 12 SP5
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server 12 SP5
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 0.6.37-2.33.1
0.6.37-2.33.1
libzypp
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 16.21.4-2.51.1
16.21.4-2.51.1
libsolv
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.6.11-10.6.11-1build10.6.11-1.10.6.11-1.1ubuntu0.1~esm1
 None known
libsolv
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.6.28-2build10.6.30-1build10.6.30-1ubuntu0.1~esm1
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-20387 is a high vulnerability (CVSS 7.5) in Opensuse Libsolv, published January 21, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.34%, the 83rd percentile. Fixed in libsolv 0.6.36-2.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open