Approved changes feed: RSS · Atom

cpe:2.3:a:hylafax:hylafax:6.0.6:*:*:*:*:*:*:*

part: a version: 6.0.6 update: *

VendorHylafax (115ecdcd-b8c0-53f4-95b4-49239c34090f)
ProductHylafax (8fd55e63-46ab-561e-b4ee-89587e9407b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hylafax purl2cpe 2026-06-01 10:13:46.210727
pkg:deb/ubuntu/hylafax purl2cpe 2026-06-01 10:13:46.210728
pkg:github/autofax/hylafax_copy purl2cpe 2026-06-01 10:13:46.210729
pkg:github/distrotech/hylafax purl2cpe 2026-06-01 10:13:46.210730
pkg:github/ifax/hylafax purl2cpe 2026-06-01 10:13:46.210732
pkg:rpm/fedora/hylafax purl2cpe 2026-06-01 10:13:46.210733
pkg:rpm/opensuse/hylafax purl2cpe 2026-06-01 10:13:46.210734
pkg:sourceforge/hylafax purl2cpe 2026-06-01 10:13:46.210736

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17141 vulnerable 2026-06-08 05:11:05.980542 Details available
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
Published: 2018-09-21T17:00:00.000Z
Updated: 2024-08-05T10:39:59.554Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.