WID-SEC-W-2026-2247

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat Enterprise Linux (libsolv, aardvark-dns): Mehrere Schwachstellen

view advisory published 2026-07-08

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-48864US——
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validat…
CVE-2026-35406UShigh7.5—
Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to ent…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan