Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:cflow:1.7:*:*:*:*:*:*:*

part: a version: 1.7 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductCflow (fd4d19d3-3311-5d0f-b0f9-4819f7f2a23f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cflow purl2cpe 2026-06-01 10:11:54.045035
pkg:deb/ubuntu/cflow purl2cpe 2026-06-01 10:11:54.045037
pkg:github/darfux/cflow purl2cpe 2026-06-01 10:11:54.045038
pkg:github/gnu-mirror-unofficial/cflow purl2cpe 2026-06-01 10:11:54.045039
pkg:github/lizh06/cflow purl2cpe 2026-06-01 10:11:54.045041
pkg:gnu/cflow purl2cpe 2026-06-01 10:11:54.045042
pkg:rpm/fedora/cflow purl2cpe 2026-06-01 10:11:54.045043
pkg:rpm/opensuse/cflow purl2cpe 2026-06-01 10:11:54.045045

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2789 vulnerable 2026-06-08 06:02:43.008550 GNU cflow parser.c parse_variable_declaration denial of service
LOW (3.5)
A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-05-18T12:31:03.470Z
Updated: 2024-08-02T06:33:05.607Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.