Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:chess:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductChess (9faa7837-6f06-51f7-b8ea-05367cec00a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnuchess purl2cpe 2026-06-01 10:11:53.439657
pkg:deb/ubuntu/gnuchess purl2cpe 2026-06-01 10:11:53.439660
pkg:github/distrotech/gnuchess purl2cpe 2026-06-01 10:11:53.439663
pkg:github/duy-thanh/gnuchess purl2cpe 2026-06-01 10:11:53.439666
pkg:github/jasonbrianhall/gnuchess purl2cpe 2026-06-01 10:11:53.439668
pkg:github/madnight/gnuchess purl2cpe 2026-06-01 10:11:53.439671
pkg:gnu/chess purl2cpe 2026-06-01 10:11:53.439674
pkg:rpm/fedora/gnuchess purl2cpe 2026-06-01 10:11:53.439677
pkg:rpm/opensuse/gnuchess purl2cpe 2026-06-01 10:11:53.439679

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8972 vulnerable 2026-06-08 05:07:05.815932 Details available
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T08:36:31.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0204 vulnerable 2026-06-08 04:46:20.898449 Details available
Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:42:28.492Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.