{"id":"CVE-2018-2052","aliases":["EUVD-2018-13907","MGASA-2019-0154"],"status":"rejected","title":"Updated libsolv packages fix security vulnerability","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-01-22T18:15:09.57Z","modified":"2026-04-16T04:42:30Z","affected":[{"source":"osv","ecosystem":"Mageia:6","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.30-1.1.mga6"}]}],"bundled":3}],"references":[{"url":"https://advisories.mageia.org/MGASA-2019-0154.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24563","tags":["report"]},{"url":"https://usn.ubuntu.com/3916-1/","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-2052","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none","status":"rejected","published":"2019-01-22T20:00:00Z","modified":"2019-01-22T17:57:02Z","updated_at":"2026-11-02T14:35:04.540365Z"}],"euvd":[{"id":"EUVD-2018-13907","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none","status":"published","published":"2019-01-22T20:00:00Z","modified":"2019-01-22T17:57:02Z","updated_at":"2026-11-03T03:51:38.275103Z"}],"nvd":[{"id":"CVE-2018-2052","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none","status":"rejected","published":"2019-01-22T18:15:09.57Z","modified":"2023-11-07T02:56:40.097Z","updated_at":"2026-11-02T14:04:53.079938Z"}],"osv":[{"id":"MGASA-2019-0154","title":"Updated libsolv packages fix security vulnerability","description":"It was discovered that libsolv incorrectly handled certain malformed\ninput. If a user or automated system were tricked into opening a specially\ncrafted file, applications that rely on libsolv could be made to crash,\nresulting in a denial of service (CVE-2018-2053[2-4]).\n","status":"published","published":"2019-05-07T21:38:09Z","modified":"2026-04-16T04:42:30.185650909Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}