Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:global:4.8.6:*:*:*:*:*:*:*

part: a version: 4.8.6 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGlobal (29f0a215-06f9-562b-bbaf-bc492a3cb129)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/global purl2cpe 2026-06-01 10:11:55.308283
pkg:deb/ubuntu/global purl2cpe 2026-06-01 10:11:55.308286
pkg:github/harai/gnu-global purl2cpe 2026-06-01 10:11:55.308289
pkg:github/namhyung/global purl2cpe 2026-06-01 10:11:55.308291
pkg:gnu/global purl2cpe 2026-06-01 10:11:55.308294
pkg:rpm/fedora/global purl2cpe 2026-06-01 10:11:55.308297
pkg:rpm/opensuse/global purl2cpe 2026-06-01 10:11:55.308299

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17531 vulnerable 2026-06-03 14:36:55.518351 Details available
gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Published: 2017-12-14T16:00:00.000Z
Updated: 2024-08-05T20:51:31.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.