Approved changes feed: RSS · Atom
cpe:2.3:a:rpm:libcomps:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rpm (c01bad82-b6fe-5fb6-8e3f-74052dbedf9d) |
|---|---|
| Product | Libcomps (a3651ae7-66d5-56db-b76c-dd24b81b890d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libcomps |
purl2cpe | 2026-06-01 10:18:00.425037 |
pkg:deb/ubuntu/libcomps |
purl2cpe | 2026-06-01 10:18:00.425040 |
pkg:github/rpm-software-management/libcomps |
purl2cpe | 2026-06-01 10:18:00.425043 |
pkg:gitlab/redhat/libcomps |
purl2cpe | 2026-06-01 10:18:00.425046 |
pkg:pypi/libcomps |
purl2cpe | 2026-06-01 10:18:00.425049 |
pkg:rpm/centos/libcomps |
purl2cpe | 2026-06-01 10:18:00.425052 |
pkg:rpm/fedora/libcomps |
purl2cpe | 2026-06-01 10:18:00.425054 |
pkg:rpm/opensuse/libcomps |
purl2cpe | 2026-06-01 10:18:00.425058 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3817 |
vulnerable | 2026-06-08 05:13:56.103562 |
Details available
HIGH (7.5)
A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.
Published: 2019-03-27T12:25:40.000Z
Updated: 2024-08-04T19:19:18.587Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.