Approved changes feed: RSS · Atom

cpe:2.3:a:libspf:libspf2:1.2.4:*:*:*:*:*:*:*

part: a version: 1.2.4 update: *

VendorLibspf (b1581d68-7929-5c74-a0fe-a3fa81a8e588)
ProductLibspf2 (10b4847b-6485-5e98-92f4-50e566397326)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libspf2-2 purl2cpe 2026-06-01 10:10:58.607239
pkg:deb/ubuntu/libspf2-2 purl2cpe 2026-06-01 10:10:58.607241
pkg:github/shevek/libspf2 purl2cpe 2026-06-01 10:10:58.607242
pkg:rpm/fedora/libspf2 purl2cpe 2026-06-01 10:10:58.607244
pkg:rpm/opensuse/libspf2 purl2cpe 2026-06-01 10:10:58.607245
pkg:sourceforge/libspf2 purl2cpe 2026-06-01 10:10:58.607246

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2469 vulnerable 2026-06-08 04:50:24.135273 Details available
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.
Published: 2008-10-23T21:00:00.000Z
Updated: 2024-08-07T09:05:29.909Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.