Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnulib:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGnulib (e9811991-738c-5eaf-8306-be9508322dea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/bamvor/gnulib purl2cpe 2026-06-01 10:11:53.273834
pkg:deb/debian/gnulib purl2cpe 2026-06-01 10:11:53.273836
pkg:deb/ubuntu/gnulib purl2cpe 2026-06-01 10:11:53.273837
pkg:github/coreutils/gnulib purl2cpe 2026-06-01 10:11:53.273839
pkg:github/digitalocean/gnulib purl2cpe 2026-06-01 10:11:53.273840
pkg:github/gagern/gnulib purl2cpe 2026-06-01 10:11:53.273841
pkg:github/val-verde/gnulib purl2cpe 2026-06-01 10:11:53.273843
pkg:gnu/gnulib purl2cpe 2026-06-01 10:11:53.273844
pkg:rpm/fedora/gnulib purl2cpe 2026-06-01 10:11:53.273846
pkg:rpm/opensuse/gnulib purl2cpe 2026-06-01 10:11:53.273847

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17942 vulnerable 2026-06-08 05:11:06.994364 Details available
The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.
Published: 2018-10-03T08:00:00.000Z
Updated: 2024-08-05T11:01:14.605Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.