Approved changes feed: RSS · Atom

cpe:2.3:a:config-model_project:config-model:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorConfig Model Project (1ac36767-182a-59fc-af99-2d75f64e550d)
ProductConfig Model (fef5f6d2-95bc-5e76-8cfb-8f3848d50c17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:cpan/config-model purl2cpe 2026-06-01 10:13:26.755735
pkg:github/dod38fr/config-model purl2cpe 2026-06-01 10:13:26.755738
pkg:rpm/fedora/perl-config-model purl2cpe 2026-06-01 10:13:26.755741
pkg:rpm/opensuse/perl-config-model purl2cpe 2026-06-01 10:13:26.755744

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-0374 vulnerable 2026-06-08 05:08:26.046212 Details available
lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array.
Published: 2017-05-23T18:00:00.000Z
Updated: 2024-08-05T13:03:57.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0373 vulnerable 2026-06-08 05:08:26.045644 Details available
The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.
Published: 2017-05-23T18:00:00.000Z
Updated: 2024-08-05T13:03:56.990Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.