Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:aspell:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductAspell (f5ebf66b-be9d-53f2-8c88-f1064a82ba7c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/aspell purl2cpe 2026-06-01 10:11:53.957884
pkg:deb/ubuntu/aspell purl2cpe 2026-06-01 10:11:53.957887
pkg:github/gnuaspell/aspell purl2cpe 2026-06-01 10:11:53.957889
pkg:gitlab/redhat/aspell purl2cpe 2026-06-01 10:11:53.957892
pkg:gnu/aspell purl2cpe 2026-06-01 10:11:53.957895
pkg:nuget/aspell purl2cpe 2026-06-01 10:11:53.957897
pkg:rpm/centos/aspell purl2cpe 2026-06-01 10:11:53.957900
pkg:rpm/fedora/aspell purl2cpe 2026-06-01 10:11:53.957903
pkg:rpm/opensuse/aspell purl2cpe 2026-06-01 10:11:53.957905
pkg:sourceforge/aspell purl2cpe 2026-06-01 10:11:53.957908

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20433 vulnerable 2026-06-08 05:13:40.610490 Details available
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
Published: 2020-01-27T14:03:26.000Z
Updated: 2024-08-05T02:39:09.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17544 vulnerable 2026-06-08 05:13:10.636478 Details available
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
Published: 2019-10-14T01:07:53.000Z
Updated: 2024-08-05T01:40:15.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.