Approved changes feed: RSS · Atom
cpe:2.3:a:buildroot:buildroot:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Buildroot (3f146422-61e9-5715-a4a4-c9faf0bdd95f) |
|---|---|
| Product | Buildroot (21e25759-62e8-5f10-86d5-6ded63452e9d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/buildroot/buildroot |
purl2cpe | 2026-06-01 10:14:49.797082 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45842 |
vulnerable | 2026-06-08 06:12:43.442740 |
Details available
HIGH (8.1)
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `mxsldr` package.
Published: 2023-12-05T11:30:11.082Z
Updated: 2025-11-04T19:25:30.483Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45841 |
vulnerable | 2026-06-08 06:12:43.442448 |
Details available
HIGH (8.1)
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `versal-firmware` package.
Published: 2023-12-05T11:30:10.990Z
Updated: 2025-11-04T19:25:29.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45840 |
vulnerable | 2026-06-08 06:12:43.442123 |
Details available
HIGH (8.1)
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `riscv64-elf-toolchain` package.
Published: 2023-12-05T11:30:10.883Z
Updated: 2025-11-04T19:25:28.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45839 |
vulnerable | 2026-06-08 06:12:43.441821 |
Details available
HIGH (8.1)
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `aufs-util` package.
Published: 2023-12-05T11:30:10.770Z
Updated: 2025-11-04T19:25:27.249Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45838 |
vulnerable | 2026-06-08 06:12:43.441371 |
Details available
HIGH (8.1)
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `aufs` package.
Published: 2023-12-05T11:30:10.671Z
Updated: 2025-11-04T19:25:26.131Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43608 |
vulnerable | 2026-06-08 06:12:37.487235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.