Approved changes feed: RSS · Atom
cpe:2.3:a:libffi_project:libffi:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libffi Project (e21c79e5-0f1d-5b8c-b4fb-c484d0703c76) |
|---|---|
| Product | Libffi (74f0beb3-9318-58d5-bede-5868f0dba3dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libffi |
purl2cpe | 2026-06-01 10:11:18.354988 |
pkg:deb/ubuntu/libffi |
purl2cpe | 2026-06-01 10:11:18.354991 |
pkg:github/coapp-packages/libffi |
purl2cpe | 2026-06-01 10:11:18.354994 |
pkg:github/libffi/libffi |
purl2cpe | 2026-06-01 10:11:18.354996 |
pkg:gitlab/redhat/libffi |
purl2cpe | 2026-06-01 10:11:18.354999 |
pkg:nuget/libffi |
purl2cpe | 2026-06-01 10:11:18.355002 |
pkg:rpm/centos/libffi |
purl2cpe | 2026-06-01 10:11:18.355005 |
pkg:rpm/fedora/libffi |
purl2cpe | 2026-06-01 10:11:18.355008 |
pkg:rpm/opensuse/libffi |
purl2cpe | 2026-06-01 10:11:18.355010 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000376 |
vulnerable | 2026-06-08 05:08:34.458638 |
Details available
libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.
Published: 2017-06-19T16:00:00.000Z
Updated: 2024-08-05T22:00:41.083Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.