Approved changes feed: RSS · Atom

cpe:2.3:a:i2pd:i2pd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorI2Pd (48aa856f-c3d0-5e02-b0cf-b0f4d1429000)
ProductI2Pd (ce517231-dee6-5175-adb6-1895fcbbb5d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/orignal/i2pd purl2cpe 2026-06-01 10:11:37.578676
pkg:deb/debian/i2pd purl2cpe 2026-06-01 10:11:37.578679
pkg:deb/ubuntu/i2pd purl2cpe 2026-06-01 10:11:37.578682
pkg:docker/purplei2p/i2pd purl2cpe 2026-06-01 10:11:37.578685
pkg:github/purplei2p/i2pd purl2cpe 2026-06-01 10:11:37.578687
pkg:rpm/opensuse/i2pd purl2cpe 2026-06-01 10:11:37.578690

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17066 vulnerable 2026-06-08 05:09:07.846728 Details available
The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.
Published: 2017-12-05T09:00:00.000Z
Updated: 2024-08-05T20:43:59.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.