Approved changes feed: RSS · Atom

cpe:2.3:a:libevt_project:libevt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibevt Project (01b25531-cc5c-5c8b-a0d9-a157192b783f)
ProductLibevt (c1f7c05c-c805-595c-9343-a829b79b0e98)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libevt purl2cpe 2026-06-01 10:12:14.677987
pkg:deb/ubuntu/libevt purl2cpe 2026-06-01 10:12:14.677990
pkg:github/libyal/libevt purl2cpe 2026-06-01 10:12:14.677992
pkg:nuget/libevt purl2cpe 2026-06-01 10:12:14.677995
pkg:rpm/opensuse/libevt purl2cpe 2026-06-01 10:12:14.677998

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8754 vulnerable 2026-06-08 05:12:06.389651 Details available
The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub
Published: 2018-03-18T03:00:00.000Z
Updated: 2024-08-05T07:02:26.033Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.