Approved changes feed: RSS · Atom

cpe:2.3:a:ocaml:ocaml:4.04.1:*:*:*:*:*:*:*

part: a version: 4.04.1 update: *

VendorOcaml (516274c5-24e8-55f0-bc4d-b2647c231d48)
ProductOcaml (e5eb1913-d6ef-5fc4-aa39-a951a114587e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ocaml purl2cpe 2026-06-01 10:15:37.406974
pkg:deb/ubuntu/ocaml purl2cpe 2026-06-01 10:15:37.406975
pkg:docker/ocaml/ocaml.org purl2cpe 2026-06-01 10:15:37.406977
pkg:github/esy-ocaml/ocaml purl2cpe 2026-06-01 10:15:37.406978
pkg:github/npm-opam/ocaml purl2cpe 2026-06-01 10:15:37.406980
pkg:github/ocaml/ocaml purl2cpe 2026-06-01 10:15:37.406981
pkg:npm/ocaml purl2cpe 2026-06-01 10:15:37.406982
pkg:rpm/fedora/ocaml purl2cpe 2026-06-01 10:15:37.406984

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9772 vulnerable 2026-06-08 05:10:10.469102 Details available
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.
Published: 2017-06-23T20:00:00.000Z
Updated: 2024-08-05T17:18:01.832Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.