Approved changes feed: RSS · Atom
cpe:2.3:o:toaruos_project:toaruos:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Toaruos Project (b463a4a9-3475-5721-a2f1-e3c18a888837) |
|---|---|
| Product | Toaruos (88934443-dca2-532e-8dc8-9682f83e8ca8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/klange/toaruos |
purl2cpe | 2026-06-01 10:13:40.473228 |
pkg:sourceforge/toaruos.mirror |
purl2cpe | 2026-06-01 10:13:40.473230 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13048 |
vulnerable | 2026-06-08 05:12:40.811861 |
Details available
kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk allocation patterns (involving PAGE_SIZE, and a value less than PAGE_SIZE).
Published: 2019-06-29T14:50:42.000Z
Updated: 2024-08-04T23:41:10.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13047 |
vulnerable | 2026-06-08 05:12:40.811569 |
Details available
kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access.
Published: 2019-06-29T14:50:33.000Z
Updated: 2024-08-04T23:41:10.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13046 |
vulnerable | 2026-06-08 05:12:40.811134 |
Details available
linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
Published: 2019-06-29T14:50:21.000Z
Updated: 2024-08-04T23:41:10.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12937 |
vulnerable | 2026-06-08 05:12:40.657772 |
Details available
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable.
Published: 2019-06-23T22:54:45.000Z
Updated: 2024-08-04T23:32:55.586Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.