Approved changes feed: RSS · Atom

cpe:2.3:a:ocaml:ocaml:4.04.0:*:*:*:*:*:*:*

part: a version: 4.04.0 update: *

VendorOcaml (516274c5-24e8-55f0-bc4d-b2647c231d48)
ProductOcaml (e5eb1913-d6ef-5fc4-aa39-a951a114587e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ocaml purl2cpe 2026-06-01 10:15:37.406939
pkg:deb/ubuntu/ocaml purl2cpe 2026-06-01 10:15:37.406940
pkg:docker/ocaml/ocaml.org purl2cpe 2026-06-01 10:15:37.406942
pkg:github/esy-ocaml/ocaml purl2cpe 2026-06-01 10:15:37.406943
pkg:github/npm-opam/ocaml purl2cpe 2026-06-01 10:15:37.406945
pkg:github/ocaml/ocaml purl2cpe 2026-06-01 10:15:37.406946
pkg:npm/ocaml purl2cpe 2026-06-01 10:15:37.406948
pkg:rpm/fedora/ocaml purl2cpe 2026-06-01 10:15:37.406949

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9772 vulnerable 2026-06-08 05:10:10.468522 Details available
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.
Published: 2017-06-23T20:00:00.000Z
Updated: 2024-08-05T17:18:01.832Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.