CVE-2019-20387

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input…

published January 21, 2020

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02338 · 83.5th percentile
Published
2020-01-21T22:54Z
EPSS history
Timeline
  • 21 JAN 22:54Z
    repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input…
    cvelistv5