CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability in the PGP verification component of libsolv allows remote attackers to exploit incorrect length handling when copying EdDSA 's' MPI into a stack buffer. This could result in denial of service during automated package or repository processing workflows. Organizations using libsolv for package management should prioritize patching this vulnerability to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could lead to a denial of service in automated package or repository processing workflows.