GCVE - cpe:2.3:a:konversation:konversation:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:konversation:konversation:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Konversation (`b21c4c1d-4c6e-5d80-b699-8e23064053b7`)
Product	Konversation (`d7cd5cff-4f69-550b-afbc-fd19a5af9284`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/konversation`	purl2cpe	2026-06-01 10:12:48.826659
`pkg:deb/ubuntu/konversation`	purl2cpe	2026-06-01 10:12:48.826662
`pkg:github/kde/konversation`	purl2cpe	2026-06-01 10:12:48.826665
`pkg:rpm/fedora/konversation`	purl2cpe	2026-06-01 10:12:48.826667
`pkg:rpm/opensuse/konversation`	purl2cpe	2026-06-01 10:12:48.826670

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-15923`	vulnerable	2026-06-08 05:08:59.728081	Details available Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service (crash) via vectors related to parsing of IRC color formatting codes. Published: 2017-11-15T16:00:00.000Z Updated: 2024-08-05T20:04:50.449Z Open on db.gcve.eu Reference links https://www.debian.org/security/2017/dsa-4033 https://cgit.kde.org/konversation.git/commit/?h=1.7&id=6a7f59ee1b9dbc6e5cf9e5f3b306504d02b73ef0 https://lists.debian.org/debian-lts-announce/2017/11/msg00020.html https://konversation.kde.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-5050`	vulnerable	2026-06-08 04:51:51.743407	Details available konversation before 1.2.3 allows attackers to cause a denial of service. Published: 2019-11-06T18:58:28.000Z Updated: 2024-08-07T07:24:54.095Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2009-5050 https://www.openwall.com/lists/oss-security/2011/01/14/2 https://bugs.kde.org/show_bug.cgi?id=219985	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4400`	vulnerable	2026-06-08 04:49:56.264796	Details available CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file. Published: 2007-08-18T21:00:00.000Z Updated: 2024-08-07T14:53:55.981Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/25281 http://securityreason.com/securityalert/3036 http://secunia.com/advisories/26456 http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html http://www.securityfocus.com/archive/1/476283/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Konversation

Notes

PURL mappings

Vulnerability references

Contribute