VIPS 7.22.2
Approved changes feed: RSS · Atom
cpe:2.3:a:vips:vips:7.22.2:*:*:*:*:*:*:*part: a version: 7.22.2 update: *
| Vendor | Vips (ead82701-fc2a-5ab2-9bbd-87c7e276db59) |
|---|---|
| Product | Vips (1d9ad185-e5bc-529f-bd74-0af94d7c9ed0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/vips |
purl2cpe | 2026-06-01 10:11:30.516716 |
pkg:deb/ubuntu/vips |
purl2cpe | 2026-06-01 10:11:30.516718 |
pkg:github/libvips/libvips |
purl2cpe | 2026-06-01 10:11:30.516719 |
pkg:rpm/fedora/vips |
purl2cpe | 2026-06-01 10:11:30.516720 |
pkg:rpm/opensuse/vips |
purl2cpe | 2026-06-01 10:11:30.516721 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-3364 |
vulnerable | 2026-06-08 04:55:14.273420 |
Details available
The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Published: 2010-10-20T17:00:00.000Z
Updated: 2024-09-16T17:14:35.272Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.