Approved changes feed: RSS · Atom

cpe:2.3:a:npitre:cramfs-tools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNpitre (26de19d4-7116-57ea-b13a-330d6130cb52)
ProductCramfs Tools (df2b5794-56fe-5094-95f8-d0d87e68c49e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8784 vulnerable 2026-06-08 08:08:58.632839 npitre cramfs-tools cramfsck.c change_file_status symlink
MEDIUM (4.2)
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named b4a3a695c9873f824907bd15659f2a6ac7667b4f. It is recommended to apply a patch to fix this issue.
Published: 2026-05-18T02:30:13.275Z
Updated: 2026-05-18T12:24:18.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8274 vulnerable 2026-06-08 08:08:58.271639 npitre cramfs-tools Directory cramfsck.c do_directory path traversal
MEDIUM (5.3)
A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function do_directory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2 is able to address this issue. The name of the patch is 2fc492747115b24d8a07eddd27a2d45229cb273c. Upgrading the affected component is recommended.
Published: 2026-05-11T04:45:10.977Z
Updated: 2026-05-11T13:59:40.266Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.