CVE:CVE-2018-20533
CNNVD:CNNVD-201812-1192
libsolv是一个用于检查软件包依赖的库。
libsolv 0.7.2及之前版本中的libsolvext.a静态链接库的ext/testcase.c文件（‘testcase_str2dep_complex’函数）存在空指针逆向引用漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade opensuse libsolv to a higher version than 0.7.2,and avoid the version (,0.7.2]; Upgrade canonical ubuntu_linux to a higher version than 18.10,and avoid the version 18.10