Approved changes feed: RSS · Atom

cpe:2.3:a:kde:amarok:2.8.0:*:*:*:*:*:*:*

part: a version: 2.8.0 update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductAmarok (9c8c0cfb-7555-5eb1-a829-fd5e1e4ab2ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/amarok purl2cpe 2026-06-01 10:14:05.662876
pkg:deb/ubuntu/amarok purl2cpe 2026-06-01 10:14:05.662880
pkg:github/kde/amarok purl2cpe 2026-06-01 10:14:05.662883
pkg:rpm/fedora/amarok purl2cpe 2026-06-01 10:14:05.662886
pkg:rpm/opensuse/amarok purl2cpe 2026-06-01 10:14:05.662888
pkg:sourceforge/amarok purl2cpe 2026-06-01 10:14:05.662891

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13152 vulnerable 2026-06-03 14:41:36.330357 Details available
A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.
Published: 2020-05-20T12:32:21.000Z
Updated: 2024-08-04T12:11:19.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.