Approved changes feed: RSS · Atom

cpe:2.3:a:ardour:ardour:2.8.11:*:*:*:*:*:*:*

part: a version: 2.8.11 update: *

VendorArdour (784fb2ed-7ecf-5fcb-a734-6d784659c02c)
ProductArdour (f61b9e78-ea79-55f1-8235-9776d9702934)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ardour purl2cpe 2026-06-01 10:17:18.473334
pkg:deb/ubuntu/ardour purl2cpe 2026-06-01 10:17:18.473335
pkg:github/ardour/ardour purl2cpe 2026-06-01 10:17:18.473336
pkg:rpm/opensuse/ardour purl2cpe 2026-06-01 10:17:18.473338

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3349 vulnerable 2026-06-08 04:55:14.221082 Details available
Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Published: 2010-10-20T17:00:00.000Z
Updated: 2024-09-16T16:57:38.588Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.